last executing test programs: 14m44.656887527s ago: executing program 0 (id=754): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000048c0)=@delchain={0x51c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4f0, 0x2, [@TCA_BPF_ACT={0x4ec, 0x1, [@m_mirred={0x4a8, 0xd, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x73, 0x10, 0x20000000, 0x8, 0xa8a}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x0, 0x8, 0x2, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x1, 0x3, 0x100, 0x100}, 0x1}}]}, {0x419, 0x6, "54aa6579cf06a9e3ba2d57a0b3b58a5530eee176cab36463f36b167af47eaffcc5614168a068fcc4247c79c80796c574b4c2af8fdde088a7c88150f55d6194c6e715d3ba099779d80777b6c2ab8ffc343de4bf6ac9bf3141c933c502312f1d4289e195942ddc770951e9bcfdcea336c0bf0474b100872803fa14af615af6da6b063b01c50e9b21ca269b37702a2bce63fba39790cd2e6ae9de2e0206a3a406a8de8f9d43417fc1e6c6771acd645f2349e72126b899f4b2cdc57f230af5679ffd82fc07c607550881f253b3710c5898f406071830211caaa7b71a20bb9fe0385bf1c91e505e3f4a21227bc62630ee99db144595ad6fc3291ae966d1e2128f1e6b2f2726d3f3dfa41850be2b91ac77c5662e1e06ba8b0e121b1008a343e92b708444c195f8d7f46cc4cf73f6d164cabc61bc7ac9ddb5530feacc09aa773720b9e4a533ed55c556b0b76add10945963618aa76433793e7a39ef3f931eb6fc30d04e6737841828e1771c547a6acf68bcf85652f4aac8aa4e7abe5eaddd2ae75756d2f18c4ad6fef07be7489eda7c55a53bd694c68bb54e282e065ca5d9cea36dcd0e0c9dca08fbbaf0d62123f74ae45ef71e47b74e8070fd637cb968ae9804da49bb42f657abc1f73e5a77acde27e0f5320610c098f9f82b5ae6a0812efbd91f2dd0ab6035645aa8da106c7d6b7e81d74eb6b6a1d5840d7811d7759c1badfdf04e55178153ee55ce3f91f94a826e35b114aab35c4eeeb4041893f4d55fe8168bb3d40350fb1ad952b2f6249eb1d26801bcaa623bbb04f5e1cbbd0cbb9ac12a8ad4cd7cf08125b67c9c1a72efab3c73fe9270687b7f10f3a594a4b789e03dd7ffb3b6350dde0280e85df41d9634d26c8686013d49ae4fcb8c456b876af55f4d18b9bdb8935c4b30a7129e3bd776e4c1accc0a95a11b27b786984368989438deea6b22eb6881944dc700357d1367845d9fa20bf2cc0893c72c080bca4dfbb90ae725297a01a08000dd4c7b5ce707b46675657c3c3a9b08bfb7a85732e9fb386f270d381dbb6039421286a79419f58181d8f15927a782297342f00393c492b83f6f830e2388802c4653e41703ce5ed84e8f6a800d213a36763d39ede3079b04101c5577d6d5ae97a7bb225543bc860be7a7476c41ae7fbadc1b811c3783fa6a11445950b2a05cae74808c19433f02ee39d3e1cbafc366e813129df0e8e097858144d1bdcc926ac2978e4e72f097bee562e21b8db59c66e1d43cc7691193036efcc0da1dfedc0bcac2d2418643385114de7e3c592a0a7976388271129f4092dfa7e54fae057a91713e82f6e17d673e0221782ded9c3f7413871ee1bf0e87b73fc99cca64b52eed094277e430743f484f3475b68ee57258f375aba6f6cad6a6656243a04dd4920d8c94098ea748aed043d64aa363dd5891f4ffcdc8d4cfc21f52265ba695c6f4b58ec63e4aecbd849bb4db37b9686c1aa7c8e4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x40, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x11, 0x6, "a1b660f5208936232cda86dbc7"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x51c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 14m44.596868673s ago: executing program 0 (id=755): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000840)=@newtaction={0x338, 0x30, 0x216822a75a8bdd29, 0x0, 0xfffffffd, {}, [{0x324, 0x1, [@m_xt={0x320, 0x7, 0x0, 0x0, {{0x7}, {0x208, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x1ff}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x53, 0x6, {0x2, 'filter\x00', 0x7, 0x1, "307da635f693136f7580e53221c834f1ef17e80295efbff212e2337f2833c74ee218ae44cddfa18eea"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x122, 0x6, {0x6, 'nat\x00', 0x9, 0xffff, "f4d9bd601456e7c844bc4007dd9fe5796d71e664abefbf86046a65fb8d1c52872bb75393dbd51f00415c29518f22794aac68f3d5fce7ca898c117fde2db0c9d6008e643da6df8b4a383cfa3dd0c0ec4c98447143a36acb12fe56824db5abb79cf482cd902e9850f2d18fdf2cdf99162de853f38bff8f9d1a1efb9fe6930656cbe522a498ee077eebfe51d778b7392e2c7ea7612f07d2cb9780c8de573279938c2126b0eeab40a3e3e44cf11fcd9bef9d9a0f2a605174bb1d6abc0ef1978c0b6652a4cc7eb90d4f7b836d34e1cf3583b6b49f4a96029822fc274ed3882177fb2176184c0d3d076deb5b2cea325f07c52cac9cbb6d15950309"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_HOOK={0x8}]}, {0xf1, 0x6, "3f723a9ea127ccea59ae7735997db633bb2ab4631af9ca34b5a8bd2488bfadb111287008d812fecf6ac358d5f534fd7bd1ba78848882e16cdcff63286f39f3afb321fd7dd1bcf01629053e96420b74ba1fbc9d7a8d9184993d2fcd8d9e8f4f769663702da5a99d9d2c4519bd61d23084e4043fe932366b305038bff078e77bfcf5aa29f8caf1e1f63d1823f636b03b0b56a108dcdc744669ab08e1cb538c3c5bbf9a0672bebc58aa6491aba64fdecd1e83c26feeadacdf71574c14b82e36d82889169c7d3fd97cf9abc597ede3631a7a41cc360e6f8fcb4afd5f4c6e71e1c9813399ead72c31d68cf99b1b465d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x338}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b700000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x39, 0xfff, 0xc84c, 0x40000000000180, 0x100000000, 0x4, 0x8, 0xd, 0x1, 0x0, 0x7, 0x7, 0x712f, 0x470ab5f9, 0x10000, 0x7], 0xeeef0000}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e000000060000003600000001000080018200ec64e1fbb8dbb6b9809feebdbbc6f79c7bee8d58636558b3dfbb145366f0fa70ecaf7dcad90d93", @ANYRES32=0x1, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000005000000020000000800"/28], 0x50) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000140)=0x1c, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000000), 0x0) 14m43.628849841s ago: executing program 0 (id=768): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x40900, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000818) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000b40)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000b80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000d00), 0x56) sendmsg$kcm(r6, &(0x7f0000000d40)={&(0x7f0000004440)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f00000044c0)=[{&(0x7f0000004500)="27030200dc0f14000e0005000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000020000000", 0x2e}], 0x1}, 0x20004801) 14m40.178824131s ago: executing program 0 (id=760): write(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180), 0x10) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0xa906fa3359acd5fa, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r2 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x24, 0x0, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000580)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000005c0), 0x4000000000000e4, 0x0) 14m38.192976952s ago: executing program 0 (id=764): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0x2}}}, 0x24}}, 0x4150) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_setup(0xaae, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x400000, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r3, 0xc004ae0a, &(0x7f0000000180)) openat$tun(0xffffffffffffff9c, 0x0, 0xa0800, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000780)='numa_maps\x00') read$FUSE(r4, &(0x7f0000000880)={0x2020}, 0x2020) 14m34.421397235s ago: executing program 0 (id=767): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x2, 0x7, 0x2) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) 14m18.896290741s ago: executing program 32 (id=767): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x2, 0x7, 0x2) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) 5m49.054395449s ago: executing program 2 (id=2351): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000340)={0x0, &(0x7f0000000380)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x27, {0x0, "48b80000c0fe00000000640f700017"}}, @nested_vmlaunch={0x12f, 0x18}], 0x6f}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) write(0xffffffffffffffff, &(0x7f0000000940)='0', 0x1) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000400)={0x0, &(0x7f0000000440)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x2b, {0x0, "0f69c04883c80c0f22c0d9d066b8a0000f00d8"}}, @nested_vmlaunch={0x12f, 0x18}], 0x73}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5m47.754458051s ago: executing program 2 (id=2357): link(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00') 5m47.580422659s ago: executing program 2 (id=2361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000780)={'syzkaller1\x00', 0xc201}) socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) socket$inet6(0xa, 0x80000, 0x10) write$tun(r1, &(0x7f0000000080)={@val={0x0, 0x800}, @val={0x3, 0x5, 0x7, 0x3, 0x80, 0x6}, @ipv6=@generic={0x4, 0x6, "840800", 0x0, 0x0, 0x1, @mcast1, @mcast2}}, 0x36) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000007c0)={'syzkaller1\x00', 0x1}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000240)={0x1, 0x0, [{0x1, 0x3, 0x4b9, 0x4f1b04e0, 0x1000}]}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='batadv_slave_1\x00', 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007bd, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10) 5m47.010405286s ago: executing program 2 (id=2365): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x42, 0x1ff) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x100000d, 0x12, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000240)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracing/events/s/p/enable\x00', 0x1, 0x0) syz_clone(0x23a40080, 0x0, 0x38, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000480)='1', 0x1) 5m46.029176406s ago: executing program 2 (id=2368): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x68}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 5m43.736566218s ago: executing program 2 (id=2375): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0xc, 0x0, 0xfec00000}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000340)={0x0, &(0x7f0000000380)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x27, {0x0, "48b80000c0fe00000000640f700017"}}, @nested_vmlaunch={0x12f, 0x18}], 0x6f}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) write(0xffffffffffffffff, &(0x7f0000000940)='0', 0x1) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000400)={0x0, &(0x7f0000000440)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x2b, {0x0, "0f69c04883c80c0f22c0d9d066b8a0000f00d8"}}, @nested_vmlaunch={0x12f, 0x18}], 0x73}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5m42.918219261s ago: executing program 33 (id=2375): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0xc, 0x0, 0xfec00000}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000340)={0x0, &(0x7f0000000380)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x27, {0x0, "48b80000c0fe00000000640f700017"}}, @nested_vmlaunch={0x12f, 0x18}], 0x6f}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) write(0xffffffffffffffff, &(0x7f0000000940)='0', 0x1) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000400)={0x0, &(0x7f0000000440)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x2b, {0x0, "0f69c04883c80c0f22c0d9d066b8a0000f00d8"}}, @nested_vmlaunch={0x12f, 0x18}], 0x73}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4m6.421847451s ago: executing program 3 (id=2530): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)=' /new_domain\nfile read /etc/passwd task.uid=0 task', 0x3a) 3m58.670540018s ago: executing program 3 (id=2538): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540)={r1}, 0xc) 3m58.05864388s ago: executing program 3 (id=2541): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(0xffffffffffffffff, 0x40109441, &(0x7f00000001c0)={0x2, 0x3, 0xb}) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x48) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x3000, 0x100000000000000d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x4a102) syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x4000000, &(0x7f0000000180)=ANY=[@ANYBLOB="696f636861727365743d6d6163677265656b2c0075b26038ff1837c965f9b83e349c9ce965cdec5a1dfcf07fa09e1d6da48000b8"], 0xf9, 0x5dab, &(0x7f00000003c0)="$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") writev(r1, &(0x7f0000006180)=[{&(0x7f00000061c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000006240), 0x208e24b) 3m54.879113243s ago: executing program 3 (id=2543): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x40000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x2000800, 0x0, 0x0, 0x59, 0x7, 0x2000}) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 3m52.073444147s ago: executing program 3 (id=2545): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r1, &(0x7f000000d000)=""/102368, 0x18fe0) getpid() getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000180)={@mcast1}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000000200)) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x4000004) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r3, 0x0, 0x4020) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, 0x0, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000300)={0x3, 0x6}) 3m47.083928764s ago: executing program 3 (id=2551): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r1, &(0x7f000000d000)=""/102368, 0x18fe0) getpid() getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000180)={@mcast1}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000000200)) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x4000004) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r3, 0x0, 0x4020) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, 0x0, 0x0) ioctl$KDSIGACCEPT(r2, 0x5607, 0x16) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000300)={0x3, 0x6}) 3m31.989167615s ago: executing program 34 (id=2551): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r1, &(0x7f000000d000)=""/102368, 0x18fe0) getpid() getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000180)={@mcast1}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000000200)) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x4000004) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r3, 0x0, 0x4020) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, 0x0, 0x0) ioctl$KDSIGACCEPT(r2, 0x5607, 0x16) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000300)={0x3, 0x6}) 2m1.481760908s ago: executing program 5 (id=2664): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffff", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540)={r1}, 0xc) 1m57.153526168s ago: executing program 5 (id=2670): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket(0x400000000010, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 1m55.16113606s ago: executing program 5 (id=2671): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r1, &(0x7f000000d000)=""/102368, 0x18fe0) getpid() getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000180)={@mcast1}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000000200)) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x4000004) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r3, 0x0, 0x4020) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, 0x0, 0x0) ioctl$KDSIGACCEPT(r2, 0x5607, 0x16) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000300)={0x3, 0x6}) 1m55.050292091s ago: executing program 1 (id=2673): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)=' /new_domain\nfile read /etc/passwd task.uid=0 task.euid=0\nselect domain=0x0}) sendmsg$nl_route(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000881}, 0x44004) syz_emit_ethernet(0x56, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0) io_setup(0x801, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000013e80)='./file1\x00', 0x42, 0x0) write$FUSE_WRITE(r9, &(0x7f0000013ec0)={0x18}, 0xfffffdef) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) syz_usb_connect$hid(0x2, 0x36, &(0x7f000000a700)=ANY=[@ANYBLOB="1201500200000040"], 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0xfffffbffa003e458, 0x2000000000000000) 1.17658134s ago: executing program 9 (id=2976): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, 0x0}) r4 = syz_create_resource$kvm_nested_state(&(0x7f0000000880)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_GET_NESTED_STATE_res(r3, 0xc080aebe, r4) openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r5 = syz_kvm_add_vcpu$x86(0x0, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, 0x0) r6 = syz_create_resource$kvm_nested_state(&(0x7f0000002e00)=@vmx={0x100, 0x0, 0x2080, {0x8000000, 0xc000, {0x1}, 0x0, 0x2}, {"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", "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"}}) ioctl$KVM_SET_NESTED_STATE_res(r3, 0x4080aebf, r6) ioctl$KVM_SET_NESTED_STATE_res(r3, 0x4080aebf, r4) 1.052200193s ago: executing program 8 (id=2977): bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$netlink(r0, &(0x7f0000012340)={0x0, 0x0, &(0x7f0000007600)=[{&(0x7f0000000ac0)=ANY=[], 0x160}], 0x1, 0x0, 0x0, 0x40000000}, 0x400c090) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 566.715472ms ago: executing program 8 (id=2978): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000040), 0x0) close(r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000046000901feffffff00000000047c00000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x48014}, 0x8000) 412.594138ms ago: executing program 8 (id=2979): fanotify_init(0x1, 0x800) 0s ago: executing program 8 (id=2980): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kexec_crash_size', 0x202, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0xe7c) kernel console output (not intermixed with test programs): batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1261.084709][T16673] (syz.8.2781,16673,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 1261.138998][T16202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1261.189570][T16202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1261.241927][T16202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1261.264898][T11211] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:200' [ 1261.275494][T11211] CPU: 1 PID: 11211 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1261.283180][T11211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1261.293280][T11211] Workqueue: hci3 hci_rx_work [ 1261.298099][T11211] Call Trace: [ 1261.301416][T11211] [ 1261.304386][T11211] dump_stack_lvl+0x188/0x24e [ 1261.309126][T11211] ? show_regs_print_info+0x12/0x12 [ 1261.314389][T11211] ? load_image+0x410/0x410 [ 1261.318958][T11211] sysfs_create_dir_ns+0x26a/0x290 [ 1261.324195][T11211] ? sysfs_warn_dup+0xa0/0xa0 [ 1261.328911][T11211] ? do_raw_spin_unlock+0x11d/0x230 [ 1261.334153][T11211] kobject_add_internal+0x617/0xca0 [ 1261.339405][T11211] kobject_add+0x160/0x230 [ 1261.343896][T11211] ? kobject_init+0x1c0/0x1c0 [ 1261.348646][T11211] ? __raw_spin_lock_init+0x41/0x100 [ 1261.353982][T11211] ? get_device_parent+0x121/0x3e0 [ 1261.359144][T11211] device_add+0x470/0x1050 [ 1261.363631][T11211] hci_conn_add_sysfs+0xd1/0x1e0 [ 1261.368641][T11211] hci_sync_conn_complete_evt+0x88c/0xd20 [ 1261.374393][T11211] hci_event_packet+0x66a/0xe60 [ 1261.379265][T11211] ? hci_remote_ext_features_evt+0xb50/0xb50 [ 1261.385358][T11211] ? bis_list+0x280/0x280 [ 1261.389710][T11211] ? lockdep_hardirqs_on+0x94/0x140 [ 1261.394926][T11211] ? hci_send_to_monitor+0x9c/0x4a0 [ 1261.400142][T11211] hci_rx_work+0x3eb/0xd40 [ 1261.404579][T11211] ? _raw_spin_unlock+0x40/0x40 [ 1261.409456][T11211] ? process_one_work+0x7b4/0x1160 [ 1261.414610][T11211] process_one_work+0x8ab/0x1160 [ 1261.420219][T11211] ? worker_detach_from_pool+0x240/0x240 [ 1261.425888][T11211] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1261.430939][T11211] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1261.436624][T11211] ? wq_worker_running+0x97/0x190 [ 1261.441707][T11211] worker_thread+0xaf5/0x12a0 [ 1261.447222][T11211] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1261.453152][T11211] kthread+0x29d/0x330 [ 1261.457272][T11211] ? worker_clr_flags+0x1a0/0x1a0 [ 1261.462317][T11211] ? kthread_blkcg+0xd0/0xd0 [ 1261.466929][T11211] ret_from_fork+0x1f/0x30 [ 1261.471390][T11211] [ 1261.476795][T11211] kobject_add_internal failed for hci3:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 1261.490297][T11211] Bluetooth: hci3: failed to register connection device [ 1261.525196][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1261.539859][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1261.553883][T16202] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.613757][T16697] FAULT_INJECTION: forcing a failure. [ 1261.613757][T16697] name failslab, interval 1, probability 5, space 0, times 97 [ 1261.628582][T16697] CPU: 1 PID: 16697 Comm: syz.7.2786 Not tainted syzkaller #0 [ 1261.636107][T16697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1261.638074][T16202] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.646179][T16697] Call Trace: [ 1261.646236][T16697] [ 1261.646247][T16697] dump_stack_lvl+0x188/0x24e [ 1261.646286][T16697] ? show_regs_print_info+0x12/0x12 [ 1261.646314][T16697] ? load_image+0x410/0x410 [ 1261.646342][T16697] ? __might_sleep+0xd0/0xd0 [ 1261.646363][T16697] ? __lock_acquire+0x7ea0/0x7ea0 [ 1261.646388][T16697] ? verify_pkcs7_signature+0x66/0x90 [ 1261.646446][T16697] should_fail_ex+0x390/0x4c0 [ 1261.646476][T16697] should_failslab+0x5/0x20 [ 1261.646496][T16697] slab_pre_alloc_hook+0x59/0x300 [ 1261.646522][T16697] ? mpi_alloc+0x4e/0x130 [ 1261.646543][T16697] __kmem_cache_alloc_node+0x4f/0x270 [ 1261.714742][T16697] ? mpi_alloc+0x4e/0x130 [ 1261.719120][T16697] kmalloc_trace+0x26/0xe0 [ 1261.723555][T16697] mpi_alloc+0x4e/0x130 [ 1261.727727][T16697] rsa_enc+0x93/0x3c0 [ 1261.731827][T16697] ? crypto_dh_decode_key+0x680/0x680 [ 1261.737240][T16697] ? __virt_addr_valid+0x188/0x540 [ 1261.742410][T16697] ? __virt_addr_valid+0x188/0x540 [ 1261.747534][T16697] ? __virt_addr_valid+0x467/0x540 [ 1261.752695][T16697] pkcs1pad_verify+0x3f9/0x5e0 [ 1261.757485][T16697] public_key_verify_signature+0x888/0xd20 [ 1261.763561][T16697] ? public_key_free+0x80/0x80 [ 1261.768385][T16697] ? lockdep_hardirqs_on+0x94/0x140 [ 1261.773618][T16697] ? find_asymmetric_key+0x2f0/0x4d0 [ 1261.778921][T16697] pkcs7_validate_trust+0x4b5/0x660 [ 1261.784144][T16697] verify_pkcs7_message_sig+0x192/0x2a0 [ 1261.789705][T16697] ? restrict_link_by_builtin_and_secondary_trusted+0x70/0x70 [ 1261.797201][T16697] ? pkcs7_parse_message+0x4c2/0x520 [ 1261.802537][T16697] ? __kmem_cache_free+0xb6/0x200 [ 1261.807694][T16697] ? pkcs7_parse_message+0x4c2/0x520 [ 1261.813019][T16697] verify_pkcs7_signature+0x66/0x90 [ 1261.818292][T16697] valid_regdb+0x1e7/0x5d0 [ 1261.822823][T16697] ? request_firmware+0x50/0x50 [ 1261.827735][T16697] ? nl80211_pre_doit+0x5a/0x890 [ 1261.832697][T16697] ? reg_reload_regdb+0x490/0x490 [ 1261.837741][T16697] ? netdev_refcnt_read+0x50/0x50 [ 1261.842823][T16697] reg_reload_regdb+0xef/0x490 [ 1261.847598][T16697] ? __nla_parse+0x3c/0x50 [ 1261.852032][T16697] ? reg_query_regdb_wmm+0x510/0x510 [ 1261.857345][T16697] genl_family_rcv_msg_doit+0x22f/0x350 [ 1261.862911][T16697] ? end_current_label_crit_section+0x170/0x170 [ 1261.869173][T16697] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1261.875176][T16697] ? bpf_lsm_capable+0x5/0x10 [ 1261.879918][T16697] ? security_capable+0x85/0xb0 [ 1261.884790][T16697] genl_rcv_msg+0x601/0x790 [ 1261.889317][T16697] ? genl_bind+0x360/0x360 [ 1261.893745][T16697] ? nl80211_req_set_reg+0x210/0x210 [ 1261.899137][T16697] netlink_rcv_skb+0x1ef/0x440 [ 1261.903925][T16697] ? genl_bind+0x360/0x360 [ 1261.908382][T16697] ? netlink_ack+0x1160/0x1160 [ 1261.913267][T16697] ? down_read+0x1a8/0x2d0 [ 1261.917701][T16697] genl_rcv+0x24/0x40 [ 1261.921701][T16697] netlink_unicast+0x7ad/0x920 [ 1261.926486][T16697] netlink_sendmsg+0x8ad/0xbd0 [ 1261.931277][T16697] ? netlink_getsockopt+0x550/0x550 [ 1261.936546][T16697] ? apparmor_socket_sendmsg+0x16c/0x330 [ 1261.942195][T16697] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1261.947491][T16697] ? security_socket_sendmsg+0x7c/0xa0 [ 1261.952969][T16697] ? netlink_getsockopt+0x550/0x550 [ 1261.958187][T16697] ____sys_sendmsg+0x5ed/0x9a0 [ 1261.962981][T16697] ? __sys_sendmsg_sock+0x30/0x30 [ 1261.968016][T16697] ? __import_iovec+0x306/0x510 [ 1261.972906][T16697] ? import_iovec+0x6f/0xa0 [ 1261.977429][T16697] ___sys_sendmsg+0x2a2/0x360 [ 1261.982210][T16697] ? __sys_sendmsg+0x2a0/0x2a0 [ 1261.987030][T16697] __se_sys_sendmsg+0x1c3/0x2b0 [ 1261.991896][T16697] ? __x64_sys_sendmsg+0x80/0x80 [ 1261.996971][T16697] ? lockdep_hardirqs_on+0x94/0x140 [ 1262.002276][T16697] do_syscall_64+0x4c/0xa0 [ 1262.006808][T16697] ? clear_bhb_loop+0x60/0xb0 [ 1262.011585][T16697] ? clear_bhb_loop+0x60/0xb0 [ 1262.016283][T16697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1262.022194][T16697] RIP: 0033:0x7efdfad9fb19 [ 1262.026625][T16697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1262.046241][T16697] RSP: 002b:00007efdfbd4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1262.054694][T16697] RAX: ffffffffffffffda RBX: 00007efdfb025fa0 RCX: 00007efdfad9fb19 [ 1262.062674][T16697] RDX: 0000000020008004 RSI: 00002000000003c0 RDI: 0000000000000004 [ 1262.070653][T16697] RBP: 00007efdfae37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1262.078622][T16697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1262.086610][T16697] R13: 00007efdfb026038 R14: 00007efdfb025fa0 R15: 00007ffebfbb3638 [ 1262.086647][T16697] [ 1262.098603][ C1] net_ratelimit: 79 callbacks suppressed [ 1262.148588][T16202] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.183670][T16202] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.195419][T15819] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1262.306433][T16697] syz.7.2786 (16697) used greatest stack depth: 17072 bytes left [ 1262.415677][T15819] usb 7-1: Using ep0 maxpacket: 8 [ 1262.430090][T15819] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1262.475044][T15819] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1262.521981][T15819] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1262.605523][T15819] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1262.650400][T15819] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1262.650436][T15819] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1262.650463][T15819] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1262.650482][T15819] usb 7-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1262.709010][T15819] usb 7-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1262.724645][T15819] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.769018][ T4926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1262.780110][T16712] input: syz0 as /devices/virtual/input/input100 [ 1262.804892][ T4926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1262.805304][T15819] usb 7-1: Product: syz [ 1262.847463][T15819] usb 7-1: Manufacturer: syz [ 1262.852152][T15819] usb 7-1: SerialNumber: syz [ 1262.883330][T15819] usb 7-1: config 0 descriptor?? [ 1262.925977][T16704] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1262.964520][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1263.051417][ T4926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1263.077663][ T4926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1263.118479][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1263.133104][T15819] snd-usb-audio: probe of 7-1:0.0 failed with error -2 [ 1263.244728][T16103] udevd[16103]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1263.327703][T16719] loop4: detected capacity change from 0 to 2048 [ 1263.457231][T16719] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1263.646815][T11211] Bluetooth: hci3: command 0x0409 tx timeout [ 1263.870602][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 1264.230077][T16739] device syzkaller1 entered promiscuous mode [ 1264.587435][T16588] usb 7-1: USB disconnect, device number 2 [ 1265.521440][T16752] loop4: detected capacity change from 0 to 32768 [ 1265.562775][T16752] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 1265.580298][T16778] FAULT_INJECTION: forcing a failure. [ 1265.580298][T16778] name failslab, interval 1, probability 5, space 0, times 98 [ 1265.660661][T16778] CPU: 1 PID: 16778 Comm: syz.7.2809 Not tainted syzkaller #0 [ 1265.668197][T16778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1265.678307][T16778] Call Trace: [ 1265.681630][T16778] [ 1265.684599][T16778] dump_stack_lvl+0x188/0x24e [ 1265.689342][T16778] ? show_regs_print_info+0x12/0x12 [ 1265.694689][T16778] ? load_image+0x410/0x410 [ 1265.699265][T16778] ? __might_sleep+0xd0/0xd0 [ 1265.703918][T16778] ? __lock_acquire+0x7ea0/0x7ea0 [ 1265.709004][T16778] ? __prealloc_shrinker+0x6e3/0x7e0 [ 1265.714428][T16778] should_fail_ex+0x390/0x4c0 [ 1265.719164][T16778] should_failslab+0x5/0x20 [ 1265.723718][T16778] slab_pre_alloc_hook+0x59/0x300 [ 1265.728785][T16778] ? __list_lru_init+0xb0/0x600 [ 1265.733709][T16778] __kmem_cache_alloc_node+0x4f/0x270 [ 1265.739109][T16778] ? __list_lru_init+0xb0/0x600 [ 1265.743978][T16778] __kmalloc+0xa3/0x240 [ 1265.748149][T16778] __list_lru_init+0xb0/0x600 [ 1265.752849][T16778] alloc_super+0x766/0x930 [ 1265.757281][T16778] ? afs_get_tree+0x1170/0x1170 [ 1265.762215][T16778] sget_fc+0x2d4/0x750 [ 1265.766296][T16778] ? afs_test_super+0x1d0/0x1d0 [ 1265.771183][T16778] afs_get_tree+0x5d0/0x1170 [ 1265.775809][T16778] ? bpf_lsm_capable+0x5/0x10 [ 1265.780512][T16778] vfs_get_tree+0x88/0x270 [ 1265.784942][T16778] do_new_mount+0x247/0xa50 [ 1265.789466][T16778] __se_sys_mount+0x2e3/0x3d0 [ 1265.794162][T16778] ? __x64_sys_mount+0xc0/0xc0 [ 1265.799118][T16778] ? lockdep_hardirqs_on+0x94/0x140 [ 1265.804344][T16778] ? __x64_sys_mount+0x1c/0xc0 [ 1265.809135][T16778] do_syscall_64+0x4c/0xa0 [ 1265.813567][T16778] ? clear_bhb_loop+0x60/0xb0 [ 1265.818281][T16778] ? clear_bhb_loop+0x60/0xb0 [ 1265.823175][T16778] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1265.829099][T16778] RIP: 0033:0x7efdfad9fb19 [ 1265.833554][T16778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1265.853177][T16778] RSP: 002b:00007efdfbd4d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1265.861606][T16778] RAX: ffffffffffffffda RBX: 00007efdfb025fa0 RCX: 00007efdfad9fb19 [ 1265.869589][T16778] RDX: 0000200000001b00 RSI: 0000200000001ac0 RDI: 0000000000000000 [ 1265.877572][T16778] RBP: 00007efdfae37b70 R08: 0000200000001b40 R09: 0000000000000000 [ 1265.885558][T16778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1265.893539][T16778] R13: 00007efdfb026038 R14: 00007efdfb025fa0 R15: 00007ffebfbb3638 [ 1265.901544][T16778] [ 1265.909968][ T4279] Bluetooth: hci3: command 0x0406 tx timeout [ 1265.982350][T16104] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 1266.546151][T16801] device-mapper: table: 248:5: clone: Error opening destination device (-ENODEV) [ 1266.617387][T16801] device-mapper: ioctl: error adding target to table [ 1266.880628][T16810] device macsec1 entered promiscuous mode [ 1266.920175][T16810] device virt_wifi0 entered promiscuous mode [ 1266.939530][T16752] FAULT_INJECTION: forcing a failure. [ 1266.939530][T16752] name failslab, interval 1, probability 5, space 0, times 96 [ 1266.954771][T16752] CPU: 1 PID: 16752 Comm: syz.4.2801 Not tainted syzkaller #0 [ 1266.962310][T16752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1266.972406][T16752] Call Trace: [ 1266.975719][T16752] [ 1266.978680][T16752] dump_stack_lvl+0x188/0x24e [ 1266.983407][T16752] ? show_regs_print_info+0x12/0x12 [ 1266.988733][T16752] ? load_image+0x410/0x410 [ 1266.993277][T16752] ? __might_sleep+0xd0/0xd0 [ 1266.997905][T16752] ? __lock_acquire+0x7ea0/0x7ea0 [ 1267.003012][T16752] should_fail_ex+0x390/0x4c0 [ 1267.007744][T16752] should_failslab+0x5/0x20 [ 1267.012285][T16752] slab_pre_alloc_hook+0x59/0x300 [ 1267.017360][T16752] ? slab_post_alloc_hook+0x67/0x490 [ 1267.022685][T16752] kmem_cache_alloc_bulk+0x42/0x4e0 [ 1267.027920][T16752] ? kmem_cache_alloc+0x1b2/0x2f0 [ 1267.033068][T16752] ? mas_alloc_nodes+0x2ec/0x880 [ 1267.038073][T16752] mas_alloc_nodes+0x449/0x880 [ 1267.042862][T16752] mas_preallocate+0x162/0x3b0 [ 1267.047641][T16752] do_mas_align_munmap+0x239/0x12d0 [ 1267.052878][T16752] ? verify_lock_unused+0x140/0x140 [ 1267.058103][T16752] ? do_mas_munmap+0x2b0/0x2b0 [ 1267.062886][T16752] ? mtree_range_walk+0x664/0x780 [ 1267.067935][T16752] ? mas_walk+0x15f/0x180 [ 1267.072276][T16752] ? mas_find+0x1ba/0x220 [ 1267.076620][T16752] do_mas_munmap+0x240/0x2b0 [ 1267.081237][T16752] __vm_munmap+0x1aa/0x2d0 [ 1267.085674][T16752] ? vm_munmap+0x20/0x20 [ 1267.089949][T16752] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1267.095948][T16752] ? syscall_enter_from_user_mode+0x21/0x80 [ 1267.102259][T16752] __x64_sys_munmap+0x5c/0x70 [ 1267.106962][T16752] do_syscall_64+0x4c/0xa0 [ 1267.106990][T16752] ? clear_bhb_loop+0x60/0xb0 [ 1267.107015][T16752] ? clear_bhb_loop+0x60/0xb0 [ 1267.116108][T16752] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1267.116137][T16752] RIP: 0033:0x7ff3bb99f947 [ 1267.126735][T16752] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1267.126757][T16752] RSP: 002b:00007ff3bc8e9e08 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 1267.126782][T16752] RAX: ffffffffffffffda RBX: 0000000001000000 RCX: 00007ff3bb99f947 [ 1267.126797][T16752] RDX: 0000000001000000 RSI: 0000000008400000 RDI: 00007ff3b17f7000 [ 1267.151159][T16752] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1267.151174][T16752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 1267.151187][T16752] R13: 00007ff3bc8e9ee0 R14: 00007ff3bc8e9ea0 R15: 00007ff3b17f7000 [ 1267.151220][T16752] [ 1267.245355][ C0] net_ratelimit: 103 callbacks suppressed [ 1267.331698][T16818] loop6: detected capacity change from 0 to 64 [ 1267.466922][T16818] syz.6.2819: attempt to access beyond end of device [ 1267.466922][T16818] loop6: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 1267.485169][T16747] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1267.509396][T16818] Buffer I/O error on dev loop6, logical block 512, async page read [ 1267.560972][T16818] syz.6.2819: attempt to access beyond end of device [ 1267.560972][T16818] loop6: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 1267.638631][T16818] Buffer I/O error on dev loop6, logical block 56576, async page read [ 1267.758555][T16814] loop7: detected capacity change from 0 to 32768 [ 1267.984903][T16814] XFS (loop7): Mounting V5 Filesystem [ 1268.260317][T16814] XFS (loop7): Ending clean mount [ 1268.337675][T16814] XFS (loop7): Quotacheck needed: Please wait. [ 1268.544543][T16814] XFS (loop7): Quotacheck: Done. [ 1268.724054][T16814] XFS (loop7): Unmounting Filesystem [ 1269.000222][T16836] loop6: detected capacity change from 0 to 40427 [ 1269.100065][T16836] F2FS-fs (loop6): invalid crc value [ 1269.146517][T16836] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1269.372101][T16836] F2FS-fs (loop6): Start checkpoint disabled! [ 1269.445936][T16836] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1269.671442][T16884] FAULT_INJECTION: forcing a failure. [ 1269.671442][T16884] name failslab, interval 1, probability 5, space 0, times 95 [ 1269.714377][T16884] CPU: 0 PID: 16884 Comm: syz.4.2831 Not tainted syzkaller #0 [ 1269.721922][T16884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1269.732025][T16884] Call Trace: [ 1269.735342][T16884] [ 1269.738316][T16884] dump_stack_lvl+0x188/0x24e [ 1269.743057][T16884] ? show_regs_print_info+0x12/0x12 [ 1269.748319][T16884] ? load_image+0x410/0x410 [ 1269.752876][T16884] ? __might_sleep+0xd0/0xd0 [ 1269.757506][T16884] ? __lock_acquire+0x7ea0/0x7ea0 [ 1269.762559][T16884] should_fail_ex+0x390/0x4c0 [ 1269.767261][T16884] should_failslab+0x5/0x20 [ 1269.771779][T16884] slab_pre_alloc_hook+0x59/0x300 [ 1269.776824][T16884] kmem_cache_alloc+0x56/0x2f0 [ 1269.781601][T16884] ? security_file_alloc+0x30/0x110 [ 1269.786883][T16884] security_file_alloc+0x30/0x110 [ 1269.791948][T16884] __alloc_file+0xc2/0x230 [ 1269.796398][T16884] alloc_empty_file+0x90/0x180 [ 1269.801192][T16884] alloc_file+0x5b/0x5f0 [ 1269.805464][T16884] alloc_file_pseudo+0x180/0x200 [ 1269.810439][T16884] ? alloc_empty_file_noaccount+0x80/0x80 [ 1269.816197][T16884] __shmem_file_setup+0x1cf/0x290 [ 1269.821244][T16884] big_key_preparse+0x271/0x4c0 [ 1269.826131][T16884] ? keyctl_pkey_verify+0x430/0x430 [ 1269.831342][T16884] ? key_task_permission+0x360/0x4a0 [ 1269.836744][T16884] key_update+0x209/0x530 [ 1269.841148][T16884] ? lookup_user_key_possessed+0x40/0x40 [ 1269.846831][T16884] ? __key_update+0x440/0x440 [ 1269.851525][T16884] ? search_process_keyrings_rcu+0x360/0x360 [ 1269.857530][T16884] ? _copy_from_user+0x11/0x170 [ 1269.862450][T16884] ? copy_user_enhanced_fast_string+0xa/0x40 [ 1269.868454][T16884] keyctl_update_key+0xf0/0x120 [ 1269.873402][T16884] __se_sys_keyctl+0x2d8/0x870 [ 1269.878179][T16884] ? __x64_sys_keyctl+0xc0/0xc0 [ 1269.883043][T16884] ? do_futex+0x310/0x320 [ 1269.887411][T16884] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1269.893402][T16884] ? slab_free_freelist_hook+0x133/0x1b0 [ 1269.899056][T16884] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1269.905067][T16884] ? lock_chain_count+0x20/0x20 [ 1269.909939][T16884] ? lockdep_hardirqs_on+0x94/0x140 [ 1269.915147][T16884] ? __x64_sys_keyctl+0x1c/0xc0 [ 1269.920021][T16884] do_syscall_64+0x4c/0xa0 [ 1269.924469][T16884] ? clear_bhb_loop+0x60/0xb0 [ 1269.929166][T16884] ? clear_bhb_loop+0x60/0xb0 [ 1269.933979][T16884] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1269.939899][T16884] RIP: 0033:0x7ff3bb99fb19 [ 1269.944325][T16884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1269.963949][T16884] RSP: 002b:00007ff3bc8ea028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1269.972397][T16884] RAX: ffffffffffffffda RBX: 00007ff3bbc25fa0 RCX: 00007ff3bb99fb19 [ 1269.980379][T16884] RDX: 0000200000000200 RSI: 0000000039c2add0 RDI: 0000000000000002 [ 1269.988360][T16884] RBP: 00007ff3bba37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1269.996340][T16884] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000000 [ 1270.004319][T16884] R13: 00007ff3bbc26038 R14: 00007ff3bbc25fa0 R15: 00007ffd4ee8b728 [ 1270.012318][T16884] [ 1271.303062][T16881] loop8: detected capacity change from 0 to 32768 [ 1271.376374][T16881] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 10 [ 1271.660314][T16904] loop7: detected capacity change from 0 to 1024 [ 1271.949239][T16087] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 10 [ 1272.422547][T11211] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1272.441511][T11211] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1272.473850][T11211] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1272.489453][T11211] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1272.498025][T11211] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1272.511426][T11211] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1272.589359][ T4577] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.685315][ C0] net_ratelimit: 70 callbacks suppressed [ 1272.909320][ T4577] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.136474][ T4577] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.244871][T16933] loop8: detected capacity change from 0 to 4096 [ 1273.301477][T16918] rxe_eth0 speed is unknown, defaulting to 1000 [ 1273.484201][ T4577] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.587829][T16942] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1273.808505][T16946] NILFS (loop8): nilfs_palloc_freev (ino=3): entry number 4092 already freed [ 1273.978848][T16946] NILFS (loop8): nilfs_sufile_do_free: segment 7 is already clean [ 1274.477187][ T4577] tipc: Left network mode [ 1274.609891][ T4279] Bluetooth: hci1: command 0x0409 tx timeout [ 1274.673713][T11211] Bluetooth: Unexpected start frame (len 21) [ 1274.848363][T16945] loop7: detected capacity change from 0 to 32768 [ 1274.900987][T16945] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1274.957809][T16945] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 1275.002383][T16945] BTRFS info (device loop7): using free space tree [ 1275.215104][T16945] BTRFS info (device loop7): enabling ssd optimizations [ 1275.453323][T16945] using random self ethernet address [ 1275.491572][T16945] using random host ethernet address [ 1275.551777][T16948] loop9: detected capacity change from 0 to 40427 [ 1275.612890][T16948] FAULT_INJECTION: forcing a failure. [ 1275.612890][T16948] name failslab, interval 1, probability 5, space 0, times 97 [ 1275.690014][T16948] CPU: 0 PID: 16948 Comm: syz.9.2849 Not tainted syzkaller #0 [ 1275.697559][T16948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1275.707677][T16948] Call Trace: [ 1275.710989][T16948] [ 1275.713952][T16948] dump_stack_lvl+0x188/0x24e [ 1275.718685][T16948] ? show_regs_print_info+0x12/0x12 [ 1275.723935][T16948] ? load_image+0x410/0x410 [ 1275.728491][T16948] ? __might_sleep+0xd0/0xd0 [ 1275.733135][T16948] ? __lock_acquire+0x7ea0/0x7ea0 [ 1275.738226][T16948] should_fail_ex+0x390/0x4c0 [ 1275.742949][T16948] should_failslab+0x5/0x20 [ 1275.747489][T16948] slab_pre_alloc_hook+0x59/0x300 [ 1275.752553][T16948] ? __lock_acquire+0x142d/0x7ea0 [ 1275.757625][T16948] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1275.763454][T16948] __kmem_cache_alloc_node+0x4f/0x270 [ 1275.768875][T16948] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1275.774633][T16948] __kmalloc+0xa3/0x240 [ 1275.778833][T16948] tomoyo_realpath_from_path+0xe2/0x5c0 [ 1275.784444][T16948] tomoyo_check_open_permission+0x212/0x440 [ 1275.790373][T16948] ? tomoyo_check_open_permission+0x1bf/0x440 [ 1275.796555][T16948] ? tomoyo_check_path_number_acl+0x280/0x280 [ 1275.796604][T16948] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1275.808661][T16948] ? __lock_acquire+0x7ea0/0x7ea0 [ 1275.808720][T16948] ? __lock_acquire+0x7ea0/0x7ea0 [ 1275.818828][T16948] ? __rwlock_init+0x140/0x140 [ 1275.823646][T16948] ? tomoyo_file_open+0xe9/0x170 [ 1275.828643][T16948] security_file_open+0x5e/0xa0 [ 1275.833547][T16948] do_dentry_open+0x2fd/0x10b0 [ 1275.838433][T16948] ? memcpy+0x3c/0x60 [ 1275.842458][T16948] path_openat+0x2674/0x2f10 [ 1275.847081][T16948] ? kasan_set_track+0x60/0x70 [ 1275.847113][T16948] ? verify_lock_unused+0x140/0x140 [ 1275.847139][T16948] ? do_sys_openat2+0xdd/0x4f0 [ 1275.852205][T16948] ? do_filp_open+0x420/0x420 [ 1275.862434][T16948] do_filp_open+0x1ee/0x420 [ 1275.862470][T16948] ? vfs_tmpfile+0x490/0x490 [ 1275.876689][T16948] ? _raw_spin_unlock+0x24/0x40 [ 1275.876718][T16948] ? alloc_fd+0x590/0x640 [ 1275.881848][T16948] do_sys_openat2+0x14b/0x4f0 [ 1275.891136][T16948] ? __kmem_cache_free+0xb6/0x200 [ 1275.896236][T16948] ? do_sys_open+0xe0/0xe0 [ 1275.896272][T16948] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1275.896313][T16948] ? lock_chain_count+0x20/0x20 [ 1275.896343][T16948] __x64_sys_openat+0x135/0x160 [ 1275.901035][T16948] do_syscall_64+0x4c/0xa0 [ 1275.916840][T16948] ? clear_bhb_loop+0x60/0xb0 [ 1275.926009][T16948] ? clear_bhb_loop+0x60/0xb0 [ 1275.926045][T16948] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1275.926069][T16948] RIP: 0033:0x7f9dceb6034e [ 1275.926101][T16948] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1275.926119][T16948] RSP: 002b:00007f9dcf9c3da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1275.926141][T16948] RAX: ffffffffffffffda RBX: 00007f9dcf9c46c0 RCX: 00007f9dceb6034e [ 1275.926154][T16948] RDX: 0000000000000000 RSI: 00007f9dcf9c3ea0 RDI: ffffffffffffff9c [ 1275.937065][T16948] RBP: 0000200000000800 R08: 0000000000000000 R09: 0000000000000000 [ 1275.937088][T16948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1275.937101][T16948] R13: 00007f9dcf9c3ea0 R14: 00000000000055a8 R15: 000020000000d380 [ 1275.937131][T16948] [ 1276.091367][T16945] FAULT_INJECTION: forcing a failure. [ 1276.091367][T16945] name failslab, interval 1, probability 5, space 0, times 96 [ 1276.145481][T16945] CPU: 1 PID: 16945 Comm: syz.7.2848 Not tainted syzkaller #0 [ 1276.153097][T16945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1276.163194][T16945] Call Trace: [ 1276.166512][T16945] [ 1276.169477][T16945] dump_stack_lvl+0x188/0x24e [ 1276.174216][T16945] ? show_regs_print_info+0x12/0x12 [ 1276.179479][T16945] ? load_image+0x410/0x410 [ 1276.184122][T16945] ? __might_sleep+0xd0/0xd0 [ 1276.188761][T16945] ? __lock_acquire+0x7ea0/0x7ea0 [ 1276.193846][T16945] should_fail_ex+0x390/0x4c0 [ 1276.198590][T16945] should_failslab+0x5/0x20 [ 1276.203147][T16945] slab_pre_alloc_hook+0x59/0x300 [ 1276.208218][T16945] kmem_cache_alloc+0x56/0x2f0 [ 1276.213038][T16945] ? __kernfs_new_node+0xe1/0x7f0 [ 1276.218122][T16945] __kernfs_new_node+0xe1/0x7f0 [ 1276.223026][T16945] ? __lock_acquire+0x7ea0/0x7ea0 [ 1276.228102][T16945] ? kernfs_new_node+0x250/0x250 [ 1276.233193][T16945] kernfs_new_node+0x148/0x250 [ 1276.238014][T16945] __kernfs_create_file+0x47/0x2e0 [ 1276.243175][T16945] sysfs_add_file_mode_ns+0x233/0x2f0 [ 1276.248702][T16945] internal_create_group+0x490/0xce0 [ 1276.254053][T16945] ? kernfs_add_one+0x14e/0x8f0 [ 1276.258949][T16945] ? __lock_acquire+0x7ea0/0x7ea0 [ 1276.264026][T16945] ? sysfs_create_group+0x20/0x20 [ 1276.269107][T16945] sysfs_create_groups+0x55/0x120 [ 1276.274183][T16945] device_add_attrs+0xdb/0x830 [ 1276.279008][T16945] ? get_device_parent+0x3e0/0x3e0 [ 1276.284160][T16945] ? kernfs_create_link+0x186/0x200 [ 1276.289674][T16945] device_add+0x677/0x1050 [ 1276.294141][T16945] netdev_register_kobject+0x184/0x320 [ 1276.299760][T16945] register_netdevice+0x133a/0x1b80 [ 1276.305014][T16945] ? netif_stacked_transfer_operstate+0x200/0x200 [ 1276.311476][T16945] ? tun_net_initialize+0x154/0x430 [ 1276.316836][T16945] ? tun_setup+0x2b0/0x2b0 [ 1276.321311][T16945] ? alloc_netdev_mqs+0xb92/0xf50 [ 1276.326410][T16945] tun_set_iff+0x82b/0xea0 [ 1276.330975][T16945] __tun_chr_ioctl+0x770/0x1ed0 [ 1276.335892][T16945] ? tun_flow_create+0x310/0x310 [ 1276.340897][T16945] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1276.345885][T16945] ? security_file_ioctl+0x7c/0xa0 [ 1276.351057][T16945] ? tun_chr_poll+0x630/0x630 [ 1276.355886][T16945] __se_sys_ioctl+0xfa/0x170 [ 1276.360510][T16945] do_syscall_64+0x4c/0xa0 [ 1276.365032][T16945] ? clear_bhb_loop+0x60/0xb0 [ 1276.365060][T16945] ? clear_bhb_loop+0x60/0xb0 [ 1276.369760][T16945] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1276.369787][T16945] RIP: 0033:0x7efdfad9fb19 [ 1276.369807][T16945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1276.369824][T16945] RSP: 002b:00007efdfbd4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1276.380490][T16945] RAX: ffffffffffffffda RBX: 00007efdfb025fa0 RCX: 00007efdfad9fb19 [ 1276.380518][T16945] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 000000000000000a [ 1276.380531][T16945] RBP: 00007efdfae37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1276.380544][T16945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1276.380556][T16945] R13: 00007efdfb026038 R14: 00007efdfb025fa0 R15: 00007ffebfbb3638 [ 1276.380591][T16945] [ 1276.485440][T16948] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1276.685502][T11211] Bluetooth: hci1: command 0x041b tx timeout [ 1276.915458][T15494] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1277.216716][T16999] loop8: detected capacity change from 0 to 32768 [ 1277.239168][T16999] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 scanned by syz.8.2855 (16999) [ 1277.365416][T16999] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1277.405852][T16999] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 1277.434258][T16999] BTRFS info (device loop8): enabling auto defrag [ 1277.444307][T16999] BTRFS info (device loop8): use no compression [ 1277.461418][T16999] BTRFS info (device loop8): force clearing of disk cache [ 1277.471583][T16999] BTRFS info (device loop8): max_inline at 4 [ 1277.487665][T16999] BTRFS info (device loop8): disabling free space tree [ 1277.799533][T16999] BTRFS info (device loop8): enabling ssd optimizations [ 1277.830531][T16999] BTRFS info (device loop8): rebuilding free space tree [ 1277.886600][ C1] net_ratelimit: 57 callbacks suppressed [ 1277.914345][T16999] BTRFS info (device loop8): disabling free space tree [ 1277.972709][T16999] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1278.011161][T16999] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1278.260648][T16918] chnl_net:caif_netlink_parms(): no params data found [ 1278.503039][T16999] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1278.765620][T11211] Bluetooth: hci1: command 0x040f tx timeout [ 1279.062315][T17043] loop7: detected capacity change from 0 to 4096 [ 1279.129114][T17050] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1279.156042][T17050] CIFS: Attempting to mount \\127.0.0.1\share [ 1279.290782][T16147] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1279.870068][T17050] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -512 [ 1279.878846][T17050] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1280.005530][T16918] bridge0: port 1(bridge_slave_0) entered blocking state [ 1280.040871][T16918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.109018][T16918] device bridge_slave_0 entered promiscuous mode [ 1280.165902][T16918] bridge0: port 2(bridge_slave_1) entered blocking state [ 1280.188671][T16918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1280.286999][T16918] device bridge_slave_1 entered promiscuous mode [ 1280.566170][T16918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1280.658264][T16918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1280.746187][T17073] FAULT_INJECTION: forcing a failure. [ 1280.746187][T17073] name failslab, interval 1, probability 5, space 0, times 94 [ 1280.804418][T17073] CPU: 1 PID: 17073 Comm: syz.7.2870 Not tainted syzkaller #0 [ 1280.811927][T17073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1280.811943][T17073] Call Trace: [ 1280.825327][T17073] [ 1280.828284][T17073] dump_stack_lvl+0x188/0x24e [ 1280.833016][T17073] ? show_regs_print_info+0x12/0x12 [ 1280.838264][T17073] ? load_image+0x410/0x410 [ 1280.842816][T17073] ? __might_sleep+0xd0/0xd0 [ 1280.847448][T17073] ? __lock_acquire+0x7ea0/0x7ea0 [ 1280.852504][T17073] should_fail_ex+0x390/0x4c0 [ 1280.857225][T17073] should_failslab+0x5/0x20 [ 1280.861762][T17073] slab_pre_alloc_hook+0x59/0x300 [ 1280.866832][T17073] kmem_cache_alloc+0x56/0x2f0 [ 1280.871623][T17073] ? create_new_namespaces+0x34/0x700 [ 1280.877043][T17073] create_new_namespaces+0x34/0x700 [ 1280.882280][T17073] ? apparmor_capable+0x12c/0x190 [ 1280.887353][T17073] ? bpf_lsm_capable+0x5/0x10 [ 1280.892069][T17073] ? security_capable+0x85/0xb0 [ 1280.896975][T17073] unshare_nsproxy_namespaces+0x116/0x160 [ 1280.902740][T17073] ksys_unshare+0x4f6/0x8e0 [ 1280.907521][T17073] ? sighand_ctor+0x40/0x40 [ 1280.912168][T17073] ? lock_chain_count+0x20/0x20 [ 1280.917064][T17073] ? syscall_enter_from_user_mode+0x21/0x80 [ 1280.923003][T17073] __x64_sys_unshare+0x34/0x40 [ 1280.927983][T17073] do_syscall_64+0x4c/0xa0 [ 1280.932449][T17073] ? clear_bhb_loop+0x60/0xb0 [ 1280.937168][T17073] ? clear_bhb_loop+0x60/0xb0 [ 1280.941878][T17073] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1280.947807][T17073] RIP: 0033:0x7efdfad9fb19 [ 1280.952254][T17073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1280.971899][T17073] RSP: 002b:00007efdfbd4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1280.980364][T17073] RAX: ffffffffffffffda RBX: 00007efdfb025fa0 RCX: 00007efdfad9fb19 [ 1280.980386][T17073] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 1280.996365][T17073] RBP: 00007efdfae37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1281.004381][T17073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1281.012368][T17073] R13: 00007efdfb026038 R14: 00007efdfb025fa0 R15: 00007ffebfbb3638 [ 1281.020369][T17073] [ 1281.034408][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 1281.050895][ T4577] device hsr_slave_0 left promiscuous mode [ 1281.195048][ T4577] device hsr_slave_1 left promiscuous mode [ 1281.208704][T17073] FAULT_INJECTION: forcing a failure. [ 1281.208704][T17073] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1281.245839][ T4577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1281.255696][ T4577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1281.299539][ T4577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1281.300281][T17073] CPU: 0 PID: 17073 Comm: syz.7.2870 Not tainted syzkaller #0 [ 1281.314441][T17073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1281.324268][ T4577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1281.324507][T17073] Call Trace: [ 1281.324519][T17073] [ 1281.337916][T17073] dump_stack_lvl+0x188/0x24e [ 1281.342660][T17073] ? show_regs_print_info+0x12/0x12 [ 1281.347913][T17073] ? load_image+0x410/0x410 [ 1281.352470][T17073] ? __lock_acquire+0x7ea0/0x7ea0 [ 1281.357545][T17073] should_fail_ex+0x390/0x4c0 [ 1281.362293][T17073] get_futex_key+0x1a6/0xe70 [ 1281.366930][T17073] ? futex_setup_timer+0xc0/0xc0 [ 1281.371913][T17073] futex_wake+0x123/0x4f0 [ 1281.376294][T17073] ? futex_wake_mark+0x150/0x150 [ 1281.381273][T17073] ? __lock_acquire+0x7ea0/0x7ea0 [ 1281.386324][T17073] ? file_end_write+0x156/0x250 [ 1281.386353][T17073] ? vfs_write+0x777/0x9a0 [ 1281.386376][T17073] do_futex+0x2e2/0x320 [ 1281.395636][T17073] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1281.395673][T17073] __se_sys_futex+0x381/0x410 [ 1281.395699][T17073] ? __x64_sys_futex+0xf0/0xf0 [ 1281.400078][T17071] loop8: detected capacity change from 0 to 32768 [ 1281.405737][T17073] ? __x64_sys_futex+0x1d/0xf0 [ 1281.405763][T17073] do_syscall_64+0x4c/0xa0 [ 1281.405792][T17073] ? clear_bhb_loop+0x60/0xb0 [ 1281.405818][T17073] ? clear_bhb_loop+0x60/0xb0 [ 1281.405845][T17073] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1281.405872][T17073] RIP: 0033:0x7efdfad9fb19 [ 1281.405893][T17073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1281.405911][T17073] RSP: 002b:00007efdfbd4d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1281.405937][T17073] RAX: ffffffffffffffda RBX: 00007efdfb025fa8 RCX: 00007efdfad9fb19 [ 1281.405953][T17073] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007efdfb025fac [ 1281.405967][T17073] RBP: 00007efdfb025fa0 R08: 000976e687698c16 R09: 0000000000000000 [ 1281.405982][T17073] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1281.405995][T17073] R13: 00007efdfb026038 R14: 00007ffebfbb3550 R15: 00007ffebfbb3638 [ 1281.406026][T17073] [ 1281.544816][T17071] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.2867 (17071) [ 1281.620778][T17071] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1281.633834][ T4577] device bridge_slave_1 left promiscuous mode [ 1281.645108][ T4577] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.664074][ T4577] device bridge_slave_0 left promiscuous mode [ 1281.682202][ T4577] bridge0: port 1(bridge_slave_0) entered disabled state [ 1281.687668][T17071] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 1281.743675][T17071] BTRFS info (device loop8): using free space tree [ 1281.761368][T17064] loop6: detected capacity change from 0 to 32768 [ 1281.815583][T17064] BTRFS warning: duplicate device /dev/loop6 devid 1 generation 8 scanned by syz.6.2868 (17064) [ 1281.903819][T17064] FAULT_INJECTION: forcing a failure. [ 1281.903819][T17064] name failslab, interval 1, probability 5, space 0, times 93 [ 1281.929206][T17071] BTRFS info (device loop8): enabling ssd optimizations [ 1281.938850][ T4577] device veth1_macvtap left promiscuous mode [ 1281.945007][ T4577] device veth0_macvtap left promiscuous mode [ 1281.946526][ T4577] device veth1_vlan left promiscuous mode [ 1281.971473][T17064] CPU: 1 PID: 17064 Comm: syz.6.2868 Not tainted syzkaller #0 [ 1281.978995][T17064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1281.979012][T17064] Call Trace: [ 1281.979020][T17064] [ 1281.979029][T17064] dump_stack_lvl+0x188/0x24e [ 1281.979070][T17064] ? show_regs_print_info+0x12/0x12 [ 1281.979098][T17064] ? load_image+0x410/0x410 [ 1281.979125][T17064] ? __might_sleep+0xd0/0xd0 [ 1281.979147][T17064] ? __lock_acquire+0x7ea0/0x7ea0 [ 1281.979174][T17064] should_fail_ex+0x390/0x4c0 [ 1281.979204][T17064] should_failslab+0x5/0x20 [ 1281.979224][T17064] slab_pre_alloc_hook+0x59/0x300 [ 1281.979260][T17064] kmem_cache_alloc+0x56/0x2f0 [ 1281.989630][T17064] ? security_file_alloc+0x30/0x110 [ 1281.989675][T17064] security_file_alloc+0x30/0x110 [ 1281.989705][T17064] __alloc_file+0xc2/0x230 [ 1281.989731][T17064] alloc_empty_file+0x90/0x180 [ 1281.989752][T17064] alloc_file+0x5b/0x5f0 [ 1281.989777][T17064] alloc_file_pseudo+0x180/0x200 [ 1281.989802][T17064] ? alloc_empty_file_noaccount+0x80/0x80 [ 1281.989826][T17064] ? alloc_fd+0x590/0x640 [ 1282.078419][T17064] sock_alloc_file+0xb3/0x240 [ 1282.078457][T17064] __sys_socket+0x12d/0x190 [ 1282.087624][T17064] __x64_sys_socket+0x76/0x80 [ 1282.092344][T17064] do_syscall_64+0x4c/0xa0 [ 1282.096778][T17064] ? clear_bhb_loop+0x60/0xb0 [ 1282.101469][T17064] ? clear_bhb_loop+0x60/0xb0 [ 1282.106173][T17064] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1282.112081][T17064] RIP: 0033:0x7fb4a419fb19 [ 1282.116548][T17064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1282.136364][T17064] RSP: 002b:00007fb4a5140028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1282.144824][T17064] RAX: ffffffffffffffda RBX: 00007fb4a4425fa0 RCX: 00007fb4a419fb19 [ 1282.152811][T17064] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 1282.160792][T17064] RBP: 00007fb4a4237b70 R08: 0000000000000000 R09: 0000000000000000 [ 1282.168778][T17064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1282.176780][T17064] R13: 00007fb4a4426038 R14: 00007fb4a4425fa0 R15: 00007ffe8e882288 [ 1282.184779][T17064] [ 1282.223516][ T4577] device veth0_vlan left promiscuous mode [ 1282.246622][T16087] BTRFS warning: duplicate device /dev/loop6 devid 1 generation 8 scanned by udevd (16087) [ 1282.410970][T17071] FAULT_INJECTION: forcing a failure. [ 1282.410970][T17071] name failslab, interval 1, probability 5, space 0, times 99 [ 1282.466549][T17071] CPU: 1 PID: 17071 Comm: syz.8.2867 Not tainted syzkaller #0 [ 1282.474064][T17071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1282.474081][T17071] Call Trace: [ 1282.474090][T17071] [ 1282.474101][T17071] dump_stack_lvl+0x188/0x24e [ 1282.474143][T17071] ? show_regs_print_info+0x12/0x12 [ 1282.474172][T17071] ? load_image+0x410/0x410 [ 1282.484540][T17071] ? __might_sleep+0xd0/0xd0 [ 1282.484572][T17071] ? __lock_acquire+0x7ea0/0x7ea0 [ 1282.495913][T17071] should_fail_ex+0x390/0x4c0 [ 1282.495953][T17071] should_failslab+0x5/0x20 [ 1282.495973][T17071] slab_pre_alloc_hook+0x59/0x300 [ 1282.495998][T17071] ? __lock_acquire+0x142d/0x7ea0 [ 1282.510314][T17071] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1282.524630][T17071] __kmem_cache_alloc_node+0x4f/0x270 [ 1282.540428][T17071] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1282.540459][T17071] __kmalloc+0xa3/0x240 [ 1282.540483][T17071] tomoyo_realpath_from_path+0xe2/0x5c0 [ 1282.551599][T17071] tomoyo_check_open_permission+0x212/0x440 [ 1282.561300][T17071] ? tomoyo_check_open_permission+0x1bf/0x440 [ 1282.561334][T17071] ? tomoyo_check_path_number_acl+0x280/0x280 [ 1282.561362][T17071] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1282.573381][T17071] ? __lock_acquire+0x7ea0/0x7ea0 [ 1282.573440][T17071] ? __lock_acquire+0x7ea0/0x7ea0 [ 1282.585452][T17071] ? __rwlock_init+0x140/0x140 [ 1282.585482][T17071] ? tomoyo_file_open+0xe9/0x170 [ 1282.585508][T17071] security_file_open+0x5e/0xa0 [ 1282.585529][T17071] do_dentry_open+0x2fd/0x10b0 [ 1282.615025][T17071] ? memcpy+0x3c/0x60 [ 1282.619055][T17071] path_openat+0x2674/0x2f10 [ 1282.623707][T17071] ? kasan_set_track+0x60/0x70 [ 1282.628504][T17071] ? verify_lock_unused+0x140/0x140 [ 1282.633743][T17071] ? do_sys_openat2+0xdd/0x4f0 [ 1282.638561][T17071] ? do_filp_open+0x420/0x420 [ 1282.643280][T17071] do_filp_open+0x1ee/0x420 [ 1282.647804][T17071] ? vfs_tmpfile+0x490/0x490 [ 1282.652424][T17071] ? _raw_spin_unlock+0x24/0x40 [ 1282.657319][T17071] ? alloc_fd+0x590/0x640 [ 1282.661706][T17071] do_sys_openat2+0x14b/0x4f0 [ 1282.666418][T17071] ? do_sys_open+0xe0/0xe0 [ 1282.670864][T17071] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1282.676866][T17071] ? lock_chain_count+0x20/0x20 [ 1282.681737][T17071] __x64_sys_openat+0x135/0x160 [ 1282.686616][T17071] do_syscall_64+0x4c/0xa0 [ 1282.691052][T17071] ? clear_bhb_loop+0x60/0xb0 [ 1282.695742][T17071] ? clear_bhb_loop+0x60/0xb0 [ 1282.700443][T17071] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1282.706349][T17071] RIP: 0033:0x7f918ad6034e [ 1282.710795][T17071] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1282.730411][T17071] RSP: 002b:00007f918bbced58 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1282.738836][T17071] RAX: ffffffffffffffda RBX: 00007f918bbcf6c0 RCX: 00007f918ad6034e [ 1282.746810][T17071] RDX: 0000000000000002 RSI: 00007f918bbceea0 RDI: ffffffffffffff9c [ 1282.746830][T17071] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1282.762778][T17071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 1282.762795][T17071] R13: 00007f918bbceee0 R14: 00007f918bbceea0 R15: 00007f9180bf7000 [ 1282.762826][T17071] [ 1282.795638][T17071] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1282.967653][T17071] FAULT_INJECTION: forcing a failure. [ 1282.967653][T17071] name failslab, interval 1, probability 5, space 0, times 97 [ 1282.980502][T17071] CPU: 0 PID: 17071 Comm: syz.8.2867 Not tainted syzkaller #0 [ 1282.988001][T17071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1282.998078][T17071] Call Trace: [ 1283.001371][T17071] [ 1283.004334][T17071] dump_stack_lvl+0x188/0x24e [ 1283.009038][T17071] ? show_regs_print_info+0x12/0x12 [ 1283.014242][T17071] ? load_image+0x410/0x410 [ 1283.018747][T17071] ? __might_sleep+0xd0/0xd0 [ 1283.023333][T17071] ? __lock_acquire+0x7ea0/0x7ea0 [ 1283.028358][T17071] should_fail_ex+0x390/0x4c0 [ 1283.033058][T17071] should_failslab+0x5/0x20 [ 1283.037576][T17071] slab_pre_alloc_hook+0x59/0x300 [ 1283.042643][T17071] kmem_cache_alloc_lru+0x49/0x2e0 [ 1283.047770][T17071] ? __d_alloc+0x2e/0x6e0 [ 1283.052144][T17071] __d_alloc+0x2e/0x6e0 [ 1283.056314][T17071] ? d_alloc_pseudo+0xe/0x70 [ 1283.060927][T17071] d_alloc_pseudo+0x19/0x70 [ 1283.065442][T17071] alloc_file_pseudo+0xe0/0x200 [ 1283.070305][T17071] ? alloc_empty_file_noaccount+0x80/0x80 [ 1283.076038][T17071] ? alloc_fd+0x590/0x640 [ 1283.080385][T17071] sock_alloc_file+0xb3/0x240 [ 1283.085076][T17071] __sys_socket+0x12d/0x190 [ 1283.089598][T17071] __x64_sys_socket+0x76/0x80 [ 1283.094288][T17071] do_syscall_64+0x4c/0xa0 [ 1283.098724][T17071] ? clear_bhb_loop+0x60/0xb0 [ 1283.103415][T17071] ? clear_bhb_loop+0x60/0xb0 [ 1283.108106][T17071] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1283.114028][T17071] RIP: 0033:0x7f918ad9fb19 [ 1283.118455][T17071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1283.138075][T17071] RSP: 002b:00007f918bbcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1283.146591][T17071] RAX: ffffffffffffffda RBX: 00007f918b025fa0 RCX: 00007f918ad9fb19 [ 1283.154572][T17071] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 1283.162554][T17071] RBP: 00007f918ae37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1283.170540][T17071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1283.178525][T17071] R13: 00007f918b026038 R14: 00007f918b025fa0 R15: 00007ffec88a6e68 [ 1283.186519][T17071] [ 1283.189946][ C0] net_ratelimit: 63 callbacks suppressed [ 1283.229813][T17071] FAULT_INJECTION: forcing a failure. [ 1283.229813][T17071] name failslab, interval 1, probability 5, space 0, times 96 [ 1283.242861][T17071] CPU: 0 PID: 17071 Comm: syz.8.2867 Not tainted syzkaller #0 [ 1283.250362][T17071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1283.260430][T17071] Call Trace: [ 1283.260441][T17071] [ 1283.260451][T17071] dump_stack_lvl+0x188/0x24e [ 1283.260489][T17071] ? show_regs_print_info+0x12/0x12 [ 1283.260518][T17071] ? load_image+0x410/0x410 [ 1283.260545][T17071] ? __might_sleep+0xd0/0xd0 [ 1283.260565][T17071] ? __lock_acquire+0x7ea0/0x7ea0 [ 1283.260599][T17071] should_fail_ex+0x390/0x4c0 [ 1283.260630][T17071] should_failslab+0x5/0x20 [ 1283.260650][T17071] slab_pre_alloc_hook+0x59/0x300 [ 1283.260681][T17071] kmem_cache_alloc+0x56/0x2f0 [ 1283.260703][T17071] ? security_inode_alloc+0x30/0x110 [ 1283.260744][T17071] security_inode_alloc+0x30/0x110 [ 1283.260775][T17071] inode_init_always+0x910/0xc90 [ 1283.260805][T17071] new_inode_pseudo+0x91/0x1c0 [ 1283.267050][T17071] __sock_create+0x129/0x940 [ 1283.277239][T17071] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1283.277271][T17071] ? _raw_spin_unlock+0x40/0x40 [ 1283.277298][T17071] mptcp_subflow_create_socket+0xfe/0xb50 [ 1283.277335][T17071] ? __mptcp_subflow_connect+0x1360/0x1360 [ 1283.286432][T17071] mptcp_init_sock+0x126/0x810 [ 1283.286466][T17071] ? mptcp_ioctl+0x340/0x340 [ 1283.296169][T17071] ? sock_init_data_uid+0x78c/0xc00 [ 1283.296231][T17071] inet_create+0xc25/0xf60 [ 1283.296257][T17071] __sock_create+0x49a/0x940 [ 1283.296288][T17071] __sys_socket+0xc4/0x190 [ 1283.296316][T17071] __x64_sys_socket+0x76/0x80 [ 1283.296341][T17071] do_syscall_64+0x4c/0xa0 [ 1283.296367][T17071] ? clear_bhb_loop+0x60/0xb0 [ 1283.296395][T17071] ? clear_bhb_loop+0x60/0xb0 [ 1283.296425][T17071] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1283.296451][T17071] RIP: 0033:0x7f918ad9fb19 [ 1283.296474][T17071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1283.296495][T17071] RSP: 002b:00007f918bbcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1283.296520][T17071] RAX: ffffffffffffffda RBX: 00007f918b025fa0 RCX: 00007f918ad9fb19 [ 1283.296536][T17071] RDX: 0000000000000106 RSI: 0000000000000001 RDI: 0000000000000002 [ 1283.296550][T17071] RBP: 00007f918ae37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1283.296564][T17071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1283.296578][T17071] R13: 00007f918b026038 R14: 00007f918b025fa0 R15: 00007ffec88a6e68 [ 1283.296608][T17071] [ 1283.296714][T17071] socket: no more sockets [ 1283.556532][T17103] jffs2: notice: (17103) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1284.381133][ T4577] team0 (unregistering): Port device team_slave_1 removed [ 1284.449865][ T4577] team0 (unregistering): Port device team_slave_0 removed [ 1284.516251][ T4577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1284.590767][ T4577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1285.161398][ T4577] bond0 (unregistering): Released all slaves [ 1285.331688][T17086] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1285.379901][T17086] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1285.433835][T17071] FAULT_INJECTION: forcing a failure. [ 1285.433835][T17071] name failslab, interval 1, probability 5, space 0, times 94 [ 1285.449397][T17071] CPU: 0 PID: 17071 Comm: syz.8.2867 Not tainted syzkaller #0 [ 1285.456917][T17071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1285.467101][T17071] Call Trace: [ 1285.470412][T17071] [ 1285.473386][T17071] dump_stack_lvl+0x188/0x24e [ 1285.478132][T17071] ? show_regs_print_info+0x12/0x12 [ 1285.483401][T17071] ? load_image+0x410/0x410 [ 1285.487959][T17071] ? __might_sleep+0xd0/0xd0 [ 1285.492682][T17071] ? __lock_acquire+0x7ea0/0x7ea0 [ 1285.497753][T17071] ? __dynamic_pr_debug+0x196/0x240 [ 1285.503036][T17071] should_fail_ex+0x390/0x4c0 [ 1285.507767][T17071] should_failslab+0x5/0x20 [ 1285.512301][T17071] slab_pre_alloc_hook+0x59/0x300 [ 1285.517345][T17071] ? tnode_new+0xbf/0x370 [ 1285.517377][T17071] __kmem_cache_alloc_node+0x4f/0x270 [ 1285.517407][T17071] ? tnode_new+0xbf/0x370 [ 1285.527101][T17071] __kmalloc+0xa3/0x240 [ 1285.527132][T17071] tnode_new+0xbf/0x370 [ 1285.527171][T17071] resize+0x7e1/0x2620 [ 1285.535667][T17071] fib_remove_alias+0x322/0x480 [ 1285.535704][T17071] fib_table_delete+0xd30/0xfc0 [ 1285.543980][T17071] ? nexthop_get_nhc_lookup+0x400/0x400 [ 1285.553665][T17071] ? l3mdev_fib_table+0x18/0x160 [ 1285.564153][T17071] ? l3mdev_fib_table+0x18/0x160 [ 1285.564193][T17071] ? fib_new_table+0x106/0x2d0 [ 1285.564220][T17071] fib_magic+0x2ea/0x3b0 [ 1285.573927][T17071] ? fib_add_ifaddr+0x5c0/0x5c0 [ 1285.583038][T17071] ? __wake_up_common+0x5b/0x4d0 [ 1285.583166][T17071] fib_del_ifaddr+0x10b2/0x14c0 [ 1285.592946][T17071] ? __might_sleep+0xd0/0xd0 [ 1285.597592][T17071] ? inetaddr_event+0xec/0x150 [ 1285.602485][T17071] ? is_eth_active_slave_of_bonding_rcu+0x260/0x260 [ 1285.609126][T17071] fib_inetaddr_event+0xb7/0x1c0 [ 1285.614120][T17071] blocking_notifier_call_chain+0x103/0x1b0 [ 1285.620084][T17071] __inet_del_ifa+0xaac/0x1090 [ 1285.624916][T17071] inetdev_event+0x5ae/0x13f0 [ 1285.629620][T17071] ? devinet_exit_net+0x220/0x220 [ 1285.634984][T17071] ? arp_netdev_event+0xd4/0x320 [ 1285.635015][T17071] raw_notifier_call_chain+0xcb/0x160 [ 1285.640103][T17071] dev_set_mtu_ext+0x45f/0x680 [ 1285.650247][T17071] ? dev_validate_mtu+0x170/0x170 [ 1285.650279][T17071] ? __lock_acquire+0x7ea0/0x7ea0 [ 1285.660306][T17071] ? do_raw_spin_lock+0x128/0x2f0 [ 1285.660333][T17071] ? __rwlock_init+0x140/0x140 [ 1285.660363][T17071] dev_set_mtu+0x41/0xc0 [ 1285.660394][T17071] dev_ifsioc+0x443/0xd50 [ 1285.674656][T17071] ? dev_ioctl+0xe80/0xe80 [ 1285.674694][T17071] ? apparmor_capable+0x12c/0x190 [ 1285.679307][T17071] ? full_name_hash+0x8e/0xe0 [ 1285.679338][T17071] ? dev_load+0x1d/0x1e0 [ 1285.683886][T17071] ? dev_load+0x1d/0x1e0 [ 1285.693602][T17071] dev_ioctl+0x55e/0xe80 [ 1285.693641][T17071] sock_do_ioctl+0x245/0x320 [ 1285.693668][T17071] ? sock_show_fdinfo+0xb0/0xb0 [ 1285.693709][T17071] sock_ioctl+0x48a/0x700 [ 1285.702456][T17071] ? sock_poll+0x430/0x430 [ 1285.711414][T17071] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1285.730054][T17071] ? security_file_ioctl+0x7c/0xa0 [ 1285.730095][T17071] ? sock_poll+0x430/0x430 [ 1285.739636][T17071] __se_sys_ioctl+0xfa/0x170 [ 1285.744254][T17071] do_syscall_64+0x4c/0xa0 [ 1285.744296][T17071] ? clear_bhb_loop+0x60/0xb0 [ 1285.753410][T17071] ? clear_bhb_loop+0x60/0xb0 [ 1285.753447][T17071] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1285.764019][T17071] RIP: 0033:0x7f918ad9fb19 [ 1285.764042][T17071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1285.764062][T17071] RSP: 002b:00007f918bbcf028 EFLAGS: 00000246 [ 1285.788069][T17071] ORIG_RAX: 0000000000000010 [ 1285.788082][T17071] RAX: ffffffffffffffda RBX: 00007f918b025fa0 RCX: 00007f918ad9fb19 [ 1285.788099][T17071] RDX: 0000200000000140 RSI: 0000000000008922 RDI: 0000000000000007 [ 1285.788113][T17071] RBP: 00007f918ae37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1285.788134][T17071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1285.788149][T17071] R13: 00007f918b026038 R14: 00007f918b025fa0 R15: 00007ffec88a6e68 [ 1285.798895][T17071] [ 1285.865744][T16918] team0: Port device team_slave_0 added [ 1285.891567][T17075] rxe_eth0 speed is unknown, defaulting to 1000 [ 1285.943478][T16147] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1285.959496][T16918] team0: Port device team_slave_1 added [ 1286.241267][T16918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1286.275359][T16918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1286.435283][T16918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1286.520866][T16918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1286.540307][T16918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1286.636226][T16918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1287.073340][T16918] device hsr_slave_0 entered promiscuous mode [ 1287.115144][T16918] device hsr_slave_1 entered promiscuous mode [ 1287.153859][T16918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1287.185070][T16918] Cannot create hsr debugfs directory [ 1287.340530][ T26] audit: type=1800 audit(1794188928.441:2595): pid=17136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2879" name="num" dev="configfs" ino=84373 res=0 errno=0 [ 1287.819157][T17145] loop6: detected capacity change from 0 to 4096 [ 1287.960700][T17149] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1288.418922][T17157] device-mapper: table: 248:8: linear: Device lookup failed (-ENODEV) [ 1288.433789][T17156] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2883'. [ 1288.461194][T17157] device-mapper: ioctl: error adding target to table [ 1288.845307][ C1] net_ratelimit: 59 callbacks suppressed [ 1289.502711][T17177] FAULT_INJECTION: forcing a failure. [ 1289.502711][T17177] name failslab, interval 1, probability 5, space 0, times 92 [ 1289.516062][T17177] CPU: 0 PID: 17177 Comm: syz.7.2889 Not tainted syzkaller #0 [ 1289.516137][T17177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1289.516153][T17177] Call Trace: [ 1289.516162][T17177] [ 1289.516172][T17177] dump_stack_lvl+0x188/0x24e [ 1289.516212][T17177] ? show_regs_print_info+0x12/0x12 [ 1289.516242][T17177] ? load_image+0x410/0x410 [ 1289.516273][T17177] ? percpu_ref_put+0x12/0x100 [ 1289.516304][T17177] should_fail_ex+0x390/0x4c0 [ 1289.516335][T17177] should_failslab+0x5/0x20 [ 1289.516356][T17177] slab_pre_alloc_hook+0x59/0x300 [ 1289.516386][T17177] kmem_cache_alloc+0x56/0x2f0 [ 1289.516409][T17177] ? fib6_add_1+0x9f2/0x13c0 [ 1289.516439][T17177] fib6_add_1+0x9f2/0x13c0 [ 1289.516479][T17177] fib6_add+0x1e0/0x3ed0 [ 1289.516515][T17177] ? ip_fib_metrics_init+0x41d/0x6f0 [ 1289.550279][T17177] ? fib6_info_alloc+0x2e/0xe0 [ 1289.550313][T17177] ? fib6_update_sernum_stub+0x110/0x110 [ 1289.569364][T17177] ? do_raw_spin_lock+0x128/0x2f0 [ 1289.579151][T17177] ? __rwlock_init+0x140/0x140 [ 1289.579187][T17177] ? ip6_route_add+0x71/0x130 [ 1289.622783][T17177] ip6_route_add+0x86/0x130 [ 1289.627407][T17177] addrconf_prefix_route+0x249/0x320 [ 1289.632708][T17177] ? addrconf_get_prefix_route+0x780/0x780 [ 1289.638547][T17177] ? in6_dev_get+0x410/0x410 [ 1289.643153][T17177] addrconf_prefix_rcv+0x54c/0x1560 [ 1289.648391][T17177] ? manage_tempaddrs+0x5d0/0x5d0 [ 1289.653452][T17177] ? __ipv6_chk_addr_and_flags+0xc3/0x6b0 [ 1289.659205][T17177] ndisc_router_discovery+0x1fa2/0x3880 [ 1289.664783][T17177] ? ndisc_router_discovery+0x770/0x3880 [ 1289.670437][T17177] ? ndisc_recv_rs+0x7f0/0x7f0 [ 1289.675239][T17177] ? ipv6_chk_mcast_addr+0x2a/0x850 [ 1289.680486][T17177] ndisc_rcv+0x4b6/0x6b0 [ 1289.684761][T17177] icmpv6_rcv+0xf2f/0x17d0 [ 1289.689209][T17177] ip6_protocol_deliver_rcu+0x97f/0x13c0 [ 1289.694921][T17177] ? ip6_input_finish+0xd6/0x2c0 [ 1289.699912][T17177] ip6_input_finish+0x181/0x2c0 [ 1289.704787][T17177] NF_HOOK+0x329/0x3b0 [ 1289.708901][T17177] ? __lock_acquire+0x7ea0/0x7ea0 [ 1289.713943][T17177] ? ip6_input+0xa0/0xa0 [ 1289.718201][T17177] ? NF_HOOK+0x9b/0x3b0 [ 1289.722372][T17177] ? ip6_rcv_core+0x1700/0x1700 [ 1289.727243][T17177] ? ip6_input+0xa0/0xa0 [ 1289.731505][T17177] ? ipv6_chk_mcast_addr+0x779/0x850 [ 1289.736820][T17177] ip6_mc_input+0x7d3/0xca0 [ 1289.741343][T17177] ? ip6_input_finish+0x2c0/0x2c0 [ 1289.746392][T17177] ? ip6_rcv_finish+0x196/0x230 [ 1289.751261][T17177] NF_HOOK+0x329/0x3b0 [ 1289.755343][T17177] ? sock_wfree+0x24b/0x600 [ 1289.759877][T17177] ? ip6_rcv_core+0x1086/0x1700 [ 1289.764740][T17177] ? refcount_add+0x80/0x80 [ 1289.769259][T17177] ? NF_HOOK+0x9b/0x3b0 [ 1289.773427][T17177] ? ip6_rcv_core+0x1700/0x1700 [ 1289.778293][T17177] ? refcount_add+0x80/0x80 [ 1289.782815][T17177] ? ip6_rcv_finish_core+0x420/0x420 [ 1289.788116][T17177] __netif_receive_skb+0xcc/0x290 [ 1289.793160][T17177] ? netif_receive_skb+0x11e/0x820 [ 1289.798290][T17177] netif_receive_skb+0x1d4/0x820 [ 1289.803238][T17177] ? __bpf_trace_tasklet+0x10/0x10 [ 1289.808381][T17177] ? enqueue_to_backlog+0xdb0/0xdb0 [ 1289.813588][T17177] ? __kasan_slab_alloc+0x6b/0x80 [ 1289.818635][T17177] ? tun_rx_batched+0x182/0x780 [ 1289.823511][T17177] tun_rx_batched+0x1db/0x780 [ 1289.828320][T17177] ? pskb_may_pull+0xf0/0xf0 [ 1289.832948][T17177] ? __local_bh_enable_ip+0x136/0x1c0 [ 1289.838349][T17177] ? lockdep_hardirqs_on+0x94/0x140 [ 1289.843567][T17177] ? read_lock_is_recursive+0x10/0x10 [ 1289.848959][T17177] ? __local_bh_enable_ip+0x136/0x1c0 [ 1289.854342][T17177] ? _local_bh_enable+0xa0/0xa0 [ 1289.859475][T17177] tun_get_user+0x27aa/0x3be0 [ 1289.864171][T17177] ? tun_get_user+0x23b3/0x3be0 [ 1289.869045][T17177] ? rcu_read_unlock+0xa0/0xa0 [ 1289.873849][T17177] ? tun_get+0x1c/0x2e0 [ 1289.878020][T17177] ? __lock_acquire+0x7ea0/0x7ea0 [ 1289.883065][T17177] ? tun_get+0x1c/0x2e0 [ 1289.887243][T17177] tun_chr_write_iter+0x112/0x1f0 [ 1289.892284][T17177] vfs_write+0x482/0x9a0 [ 1289.896571][T17177] ? file_end_write+0x250/0x250 [ 1289.901442][T17177] ? __fget_files+0x3fc/0x460 [ 1289.906156][T17177] ? __fdget_pos+0x1d4/0x360 [ 1289.910762][T17177] ? ksys_write+0x70/0x260 [ 1289.915190][T17177] ksys_write+0x14d/0x260 [ 1289.919535][T17177] ? __ia32_sys_read+0x80/0x80 [ 1289.924310][T17177] ? lockdep_hardirqs_on+0x94/0x140 [ 1289.929616][T17177] do_syscall_64+0x4c/0xa0 [ 1289.934048][T17177] ? clear_bhb_loop+0x60/0xb0 [ 1289.938744][T17177] ? clear_bhb_loop+0x60/0xb0 [ 1289.943435][T17177] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1289.949340][T17177] RIP: 0033:0x7efdfad6034e [ 1289.953768][T17177] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1289.973385][T17177] RSP: 002b:00007efdfbd4cfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1289.981812][T17177] RAX: ffffffffffffffda RBX: 00007efdfbd4d6c0 RCX: 00007efdfad6034e [ 1289.989791][T17177] RDX: 00000000000003b6 RSI: 00002000000006c0 RDI: 00000000000000c8 [ 1289.997771][T17177] RBP: 00007efdfae37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1290.005761][T17177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1290.013828][T17177] R13: 00007efdfb026038 R14: 00007efdfb025fa0 R15: 00007ffebfbb3638 [ 1290.021826][T17177] [ 1290.024867][ C0] vkms_vblank_simulate: vblank timer overrun [ 1290.091130][ T26] audit: type=1800 audit(1794188931.191:2596): pid=17179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2890" name="num" dev="configfs" ino=85789 res=0 errno=0 [ 1290.211893][T16918] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1290.224497][T17182] CIFS: Attempting to mount \\127.0.0.1\share [ 1290.271672][T16918] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1290.310722][T16918] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1290.362835][T16918] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1290.387945][T17186] loop6: detected capacity change from 0 to 1024 [ 1290.649409][T17186] FAULT_INJECTION: forcing a failure. [ 1290.649409][T17186] name failslab, interval 1, probability 5, space 0, times 91 [ 1290.689403][T17192] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2893'. [ 1290.725643][T17186] CPU: 0 PID: 17186 Comm: syz.6.2888 Not tainted syzkaller #0 [ 1290.733176][T17186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1290.743270][T17186] Call Trace: [ 1290.746582][T17186] [ 1290.749547][T17186] dump_stack_lvl+0x188/0x24e [ 1290.754284][T17186] ? show_regs_print_info+0x12/0x12 [ 1290.759532][T17186] ? load_image+0x410/0x410 [ 1290.764086][T17186] ? __might_sleep+0xd0/0xd0 [ 1290.768720][T17186] ? __lock_acquire+0x7ea0/0x7ea0 [ 1290.773789][T17186] should_fail_ex+0x390/0x4c0 [ 1290.778514][T17186] should_failslab+0x5/0x20 [ 1290.783050][T17186] slab_pre_alloc_hook+0x59/0x300 [ 1290.788128][T17186] ? crypto_create_tfm_node+0x73/0x380 [ 1290.793645][T17186] __kmem_cache_alloc_node+0x4f/0x270 [ 1290.799056][T17186] ? crypto_create_tfm_node+0x73/0x380 [ 1290.804558][T17186] __kmalloc_node+0xa2/0x240 [ 1290.809289][T17186] crypto_create_tfm_node+0x73/0x380 [ 1290.814627][T17186] crypto_spawn_tfm2+0x58/0x90 [ 1290.819435][T17186] pkcs1pad_init_tfm+0x44/0x120 [ 1290.824332][T17186] crypto_create_tfm_node+0x151/0x380 [ 1290.829747][T17186] ? crypto_alg_mod_lookup+0x1a9/0x570 [ 1290.835245][T17186] crypto_alloc_tfm_node+0x177/0x360 [ 1290.840577][T17186] public_key_verify_signature+0x27b/0xd20 [ 1290.846495][T17186] ? lock_chain_count+0x20/0x20 [ 1290.851390][T17186] ? kasan_quarantine_put+0xd4/0x210 [ 1290.856750][T17186] ? lockdep_hardirqs_on+0x94/0x140 [ 1290.861992][T17186] ? public_key_free+0x80/0x80 [ 1290.866824][T17186] ? __kmem_cache_free+0xb6/0x200 [ 1290.871888][T17186] ? pkcs7_digest+0x6ca/0x890 [ 1290.876631][T17186] ? asymmetric_key_id_same+0x63/0xe0 [ 1290.882058][T17186] pkcs7_verify+0x418/0x1320 [ 1290.886702][T17186] ? lockdep_hardirqs_on+0x94/0x140 [ 1290.891920][T17186] ? pkcs7_supply_detached_data+0x49/0xa0 [ 1290.897676][T17186] verify_pkcs7_message_sig+0xf4/0x2a0 [ 1290.897710][T17186] ? restrict_link_by_builtin_and_secondary_trusted+0x70/0x70 [ 1290.897739][T17186] ? pkcs7_parse_message+0x4c2/0x520 [ 1290.915985][T17186] ? __kmem_cache_free+0xb6/0x200 [ 1290.921041][T17186] ? pkcs7_parse_message+0x4c2/0x520 [ 1290.921080][T17186] verify_pkcs7_signature+0x66/0x90 [ 1290.931562][T17186] valid_regdb+0x1e7/0x5d0 [ 1290.931598][T17186] ? request_firmware+0x50/0x50 [ 1290.940863][T17186] ? nl80211_pre_doit+0x5a/0x890 [ 1290.940895][T17186] ? reg_reload_regdb+0x490/0x490 [ 1290.940919][T17186] ? netdev_refcnt_read+0x50/0x50 [ 1290.950872][T17186] reg_reload_regdb+0xef/0x490 [ 1290.961104][T17186] ? __nla_parse+0x3c/0x50 [ 1290.961136][T17186] ? reg_query_regdb_wmm+0x510/0x510 [ 1290.971058][T17186] genl_family_rcv_msg_doit+0x22f/0x350 [ 1290.976656][T17186] ? end_current_label_crit_section+0x170/0x170 [ 1290.982947][T17186] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1290.988905][T17186] ? bpf_lsm_capable+0x5/0x10 [ 1290.993632][T17186] ? security_capable+0x85/0xb0 [ 1290.998533][T17186] genl_rcv_msg+0x601/0x790 [ 1291.003100][T17186] ? genl_bind+0x360/0x360 [ 1291.007562][T17186] ? nl80211_req_set_reg+0x210/0x210 [ 1291.012904][T17186] netlink_rcv_skb+0x1ef/0x440 [ 1291.017710][T17186] ? genl_bind+0x360/0x360 [ 1291.022168][T17186] ? netlink_ack+0x1160/0x1160 [ 1291.026984][T17186] ? down_read+0x1a8/0x2d0 [ 1291.031526][T17186] genl_rcv+0x24/0x40 [ 1291.035563][T17186] netlink_unicast+0x7ad/0x920 [ 1291.040392][T17186] netlink_sendmsg+0x8ad/0xbd0 [ 1291.045220][T17186] ? netlink_getsockopt+0x550/0x550 [ 1291.050450][T17186] ? apparmor_socket_sendmsg+0x16c/0x330 [ 1291.050485][T17186] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1291.061450][T17186] ? security_socket_sendmsg+0x7c/0xa0 [ 1291.066949][T17186] ? netlink_getsockopt+0x550/0x550 [ 1291.072189][T17186] ____sys_sendmsg+0x5ed/0x9a0 [ 1291.072231][T17186] ? __sys_sendmsg_sock+0x30/0x30 [ 1291.082011][T17186] ? __import_iovec+0x306/0x510 [ 1291.082050][T17186] ? import_iovec+0x6f/0xa0 [ 1291.091416][T17186] ___sys_sendmsg+0x2a2/0x360 [ 1291.096143][T17186] ? __sys_sendmsg+0x2a0/0x2a0 [ 1291.101011][T17186] __se_sys_sendmsg+0x1c3/0x2b0 [ 1291.105885][T17186] ? __x64_sys_sendmsg+0x80/0x80 [ 1291.105931][T17186] ? lockdep_hardirqs_on+0x94/0x140 [ 1291.116060][T17186] do_syscall_64+0x4c/0xa0 [ 1291.116090][T17186] ? clear_bhb_loop+0x60/0xb0 [ 1291.125186][T17186] ? clear_bhb_loop+0x60/0xb0 [ 1291.125217][T17186] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1291.136182][T17186] RIP: 0033:0x7fb4a419fb19 [ 1291.140633][T17186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1291.160276][T17186] RSP: 002b:00007fb4a5140028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1291.168713][T17186] RAX: ffffffffffffffda RBX: 00007fb4a4425fa0 RCX: 00007fb4a419fb19 [ 1291.168734][T17186] RDX: 0000000020008004 RSI: 00002000000003c0 RDI: 0000000000000004 [ 1291.168748][T17186] RBP: 00007fb4a4237b70 R08: 0000000000000000 R09: 0000000000000000 [ 1291.168761][T17186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1291.168775][T17186] R13: 00007fb4a4426038 R14: 00007fb4a4425fa0 R15: 00007ffe8e882288 [ 1291.184785][T17186] [ 1291.200750][ C0] vkms_vblank_simulate: vblank timer overrun [ 1291.227169][T17182] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1291.325938][T16918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1291.366812][T16089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1291.385958][T16089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1291.399889][T16918] 8021q: adding VLAN 0 to HW filter on device team0 [ 1291.422348][T16089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1291.447924][T16089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1291.457182][T16089] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.464333][T16089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1291.513301][T16089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1291.530220][T16089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1291.541020][T16089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1291.550415][T16089] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.557635][T16089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1291.585847][T16089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1291.626045][T16089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1291.645446][T16587] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1291.656598][T16089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1291.679125][T16089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1291.707729][T17202] batman_adv: batadv0: Adding interface: syzkaller0 [ 1291.740843][T17202] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1291.785346][T17202] batman_adv: batadv0: Interface activated: syzkaller0 [ 1291.801072][T16918] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1291.830956][T17200] loop7: detected capacity change from 0 to 4096 [ 1291.832098][T16918] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1291.858006][T16587] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1291.870298][T16089] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1291.883930][T16587] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1291.897520][T16089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1291.949865][T16587] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1291.967499][T16089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1291.989670][T17208] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1292.008886][T16587] usb 9-1: string descriptor 0 read error: -22 [ 1292.024697][T16089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1292.054023][T16089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1292.064361][T16587] usb 9-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 1292.100740][T16089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1292.124865][T16587] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.133555][T16089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1292.183694][T17201] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1292.281612][T17201] batman_adv: batadv0: Removing interface: syzkaller0 [ 1292.336504][T16089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1292.362729][T17211] NILFS (loop7): nilfs_sufile_do_free: segment 9 is already clean [ 1292.521468][T16587] usb 9-1: USB disconnect, device number 2 [ 1292.909871][T17222] loop9: detected capacity change from 0 to 4096 [ 1293.004340][T17228] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1293.036235][ T26] audit: type=1800 audit(1794188934.141:2597): pid=17227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2901" name="num" dev="configfs" ino=86017 res=0 errno=0 [ 1293.201850][T17229] device syzkaller0 entered promiscuous mode [ 1293.267398][T17229] tipc: Started in network mode [ 1293.305653][T17229] tipc: Node identity f20bf02c3e75, cluster identity 4711 [ 1293.313453][T17229] tipc: Enabled bearer , priority 0 [ 1293.548617][T16918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1293.577409][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1293.585217][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1293.675418][T16689] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1293.869309][T16689] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1293.888382][T16689] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1293.936697][T16689] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1293.985556][T16689] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1294.017110][T16689] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1294.051101][T16689] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1294.093413][T16689] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1294.125661][T16689] usb 7-1: Product: syz [ 1294.139923][T16689] usb 7-1: Manufacturer: syz [ 1294.192762][T16689] cdc_wdm 7-1:1.0: skipping garbage [ 1294.208331][T16689] cdc_wdm 7-1:1.0: skipping garbage [ 1294.256294][T16689] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1294.274727][T16689] cdc_wdm 7-1:1.0: Unknown control protocol [ 1294.285292][ C1] net_ratelimit: 44 callbacks suppressed [ 1294.427637][T16462] tipc: Node number set to 3430871084 [ 1294.440418][T17234] loop8: detected capacity change from 0 to 32768 [ 1294.550461][T13553] usb 7-1: USB disconnect, device number 3 [ 1294.707836][T17234] XFS (loop8): Mounting V5 Filesystem [ 1294.731746][T17260] CIFS: Attempting to mount \\127.0.0.1\share [ 1294.827441][T17234] XFS (loop8): Ending clean mount [ 1294.934344][T17234] XFS (loop8): Quotacheck needed: Please wait. [ 1295.142102][T17234] XFS (loop8): Quotacheck: Done. [ 1295.291869][T16147] XFS (loop8): Unmounting Filesystem [ 1295.373573][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1295.441485][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1295.533115][T17239] loop7: detected capacity change from 0 to 65536 [ 1295.556753][T17260] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1295.655198][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1295.666247][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1295.678250][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1295.686696][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1295.733671][T17239] XFS (loop7): Mounting V5 Filesystem [ 1295.750040][T16918] device veth0_vlan entered promiscuous mode [ 1295.810543][T16918] device veth1_vlan entered promiscuous mode [ 1295.849295][T17282] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2908'. [ 1295.867324][T17239] XFS (loop7): Ending clean mount [ 1295.906223][T17282] device hsr_slave_0 left promiscuous mode [ 1295.927772][T17282] device hsr_slave_1 left promiscuous mode [ 1296.136294][T17239] tipc: Resetting bearer [ 1296.147799][T17226] tipc: Resetting bearer [ 1296.276575][T17226] tipc: Disabling bearer [ 1296.358424][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1296.396407][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1296.421056][T17272] loop9: detected capacity change from 0 to 32768 [ 1296.432941][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1296.477053][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1296.525047][T16918] device veth0_macvtap entered promiscuous mode [ 1296.549885][T17272] JBD2: Ignoring recovery information on journal [ 1296.557492][T15494] XFS (loop7): Unmounting Filesystem [ 1296.637269][T16918] device veth1_macvtap entered promiscuous mode [ 1296.710586][T17272] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1296.789380][T16918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1296.819268][ T4456] (kworker/u4:8,4456,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 1296.857397][ T4456] (kworker/u4:8,4456,0):ocfs2_read_locked_inode:570 ERROR: status = -12 [ 1296.876120][T16918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1296.888219][ T4456] (kworker/u4:8,4456,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=256, inode=0, rec_len=0, name_len=0 [ 1296.904568][ T26] audit: type=1800 audit(1794188937.991:2598): pid=17272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2906" name="file1" dev="loop9" ino=17058 res=0 errno=0 [ 1296.935519][T16918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1296.946199][T16918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1296.956081][T16918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1296.975009][T16918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1296.996511][T16918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1297.009668][T16918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.027450][ T26] audit: type=1800 audit(1794188938.131:2599): pid=17306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2912" name="num" dev="configfs" ino=86202 res=0 errno=0 [ 1297.093251][T16918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1297.264687][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1297.296301][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1297.329609][T17307] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1297.393975][T17315] overlayfs: upper fs does not support tmpfile. [ 1297.411068][T17272] (syz.9.2906,17272,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=1099511627848, rec_len=12, name_len=0 [ 1297.450416][T17272] (syz.9.2906,17272,0):__ocfs2_delete_entry:1223 ERROR: status = -5 [ 1297.479832][T17314] device syzkaller0 entered promiscuous mode [ 1297.529745][T17272] (syz.9.2906,17272,0):ocfs2_orphan_del:2390 ERROR: status = -5 [ 1297.550871][T16918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1297.563485][T16918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.565579][T17272] (syz.9.2906,17272,1):ocfs2_orphan_del:2405 ERROR: status = -5 [ 1297.586679][T16918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1297.615325][T16918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.632491][T17272] (syz.9.2906,17272,1):ocfs2_del_inode_from_orphan:2738 ERROR: status = -5 [ 1297.635375][T16918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1297.665619][T17272] (syz.9.2906,17272,1):ocfs2_dio_end_io_write:2418 ERROR: status = -5 [ 1297.665972][T17315] (syz.9.2906,17315,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=1099511627848, rec_len=12, name_len=0 [ 1297.705343][T16918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.715692][T16918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1297.745388][T16918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.767217][T16918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1297.787971][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1297.796638][T17315] (syz.9.2906,17315,0):ocfs2_prepare_dir_for_insert:4372 ERROR: status = -2 [ 1297.810310][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1297.829092][T17315] (syz.9.2906,17315,0):__ocfs2_prepare_orphan_dir:2172 ERROR: status = -2 [ 1297.847610][T17315] (syz.9.2906,17315,0):ocfs2_prepare_orphan_dir:2214 ERROR: status = -2 [ 1297.865543][T17315] (syz.9.2906,17315,0):ocfs2_prepare_orphan_dir:2230 ERROR: status = -2 [ 1297.896307][T17315] (syz.9.2906,17315,0):ocfs2_unlink:966 ERROR: status = -2 [ 1297.920505][T17315] overlayfs: cleanup of 'work/#7' failed (-2) [ 1297.946006][T17315] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1297.996786][T17315] overlayfs: upper fs missing required features. [ 1298.181102][T17323] FAULT_INJECTION: forcing a failure. [ 1298.181102][T17323] name failslab, interval 1, probability 5, space 0, times 100 [ 1298.203497][T17323] CPU: 1 PID: 17323 Comm: syz.7.2914 Not tainted syzkaller #0 [ 1298.211003][T17323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1298.211019][T17323] Call Trace: [ 1298.211028][T17323] [ 1298.222458][T17318] loop8: detected capacity change from 0 to 32768 [ 1298.224376][T17323] dump_stack_lvl+0x188/0x24e [ 1298.233726][T17323] ? show_regs_print_info+0x12/0x12 [ 1298.233761][T17323] ? load_image+0x410/0x410 [ 1298.243631][T17323] ? __might_sleep+0xd0/0xd0 [ 1298.252716][T17323] ? __lock_acquire+0x7ea0/0x7ea0 [ 1298.252753][T17323] should_fail_ex+0x390/0x4c0 [ 1298.262454][T17323] should_failslab+0x5/0x20 [ 1298.262479][T17323] slab_pre_alloc_hook+0x59/0x300 [ 1298.272010][T17323] kmem_cache_alloc+0x56/0x2f0 [ 1298.272039][T17323] ? security_inode_alloc+0x30/0x110 [ 1298.282077][T17323] security_inode_alloc+0x30/0x110 [ 1298.282111][T17323] inode_init_always+0x910/0xc90 [ 1298.287579][T17323] new_inode_pseudo+0x91/0x1c0 [ 1298.287607][T17323] new_inode+0x25/0x1d0 [ 1298.287632][T17323] shmem_get_inode+0x327/0xbc0 [ 1298.287662][T17323] ? _raw_spin_unlock+0x24/0x40 [ 1298.287689][T17323] __shmem_file_setup+0x10b/0x290 [ 1298.287714][T17323] ? shmem_file_setup+0x13/0x30 [ 1298.287743][T17323] __se_sys_memfd_create+0x1e1/0x340 [ 1298.287772][T17323] do_syscall_64+0x4c/0xa0 [ 1298.287800][T17323] ? clear_bhb_loop+0x60/0xb0 [ 1298.287827][T17323] ? clear_bhb_loop+0x60/0xb0 [ 1298.287855][T17323] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1298.287881][T17323] RIP: 0033:0x7efdfad9fb19 [ 1298.287899][T17323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1298.287916][T17323] RSP: 002b:00007efdfbd4ce08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1298.287940][T17323] RAX: ffffffffffffffda RBX: 00000000000055a8 RCX: 00007efdfad9fb19 [ 1298.287964][T17323] RDX: 00007efdfbd4cee0 RSI: 0000000000000000 RDI: 00007efdfae37d63 [ 1298.287978][T17323] RBP: 0000200000001c00 R08: 00000000ffffffff R09: 0000000000000000 [ 1298.287993][T17323] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000840 [ 1298.288007][T17323] R13: 00007efdfbd4cee0 R14: 00007efdfbd4cea0 R15: 000020000000d380 [ 1298.288038][T17323] [ 1298.612036][T17318] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 1298.690625][T17318] JBD2: Ignoring recovery information on journal [ 1298.796816][T17323] FAULT_INJECTION: forcing a failure. [ 1298.796816][T17323] name failslab, interval 1, probability 5, space 0, times 94 [ 1298.810735][T17323] CPU: 1 PID: 17323 Comm: syz.7.2914 Not tainted syzkaller #0 [ 1298.818253][T17323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1298.828344][T17323] Call Trace: [ 1298.831649][T17323] [ 1298.834597][T17323] dump_stack_lvl+0x188/0x24e [ 1298.839308][T17323] ? show_regs_print_info+0x12/0x12 [ 1298.844526][T17323] ? load_image+0x410/0x410 [ 1298.849044][T17323] ? __might_sleep+0xd0/0xd0 [ 1298.853658][T17323] ? __lock_acquire+0x7ea0/0x7ea0 [ 1298.858700][T17323] should_fail_ex+0x390/0x4c0 [ 1298.863406][T17323] should_failslab+0x5/0x20 [ 1298.868004][T17323] slab_pre_alloc_hook+0x59/0x300 [ 1298.873048][T17323] kmem_cache_alloc+0x56/0x2f0 [ 1298.877824][T17323] ? __kernfs_new_node+0xe1/0x7f0 [ 1298.882883][T17323] __kernfs_new_node+0xe1/0x7f0 [ 1298.887750][T17323] ? __lock_acquire+0x7ea0/0x7ea0 [ 1298.892791][T17323] ? kernfs_new_node+0x250/0x250 [ 1298.898019][T17323] kernfs_new_node+0x148/0x250 [ 1298.902803][T17323] __kernfs_create_file+0x47/0x2e0 [ 1298.908019][T17323] sysfs_add_file_mode_ns+0x233/0x2f0 [ 1298.913414][T17323] internal_create_group+0x490/0xce0 [ 1298.918742][T17323] ? loop_set_status_from_info+0x2a0/0x2a0 [ 1298.924663][T17323] ? sysfs_create_group+0x20/0x20 [ 1298.929710][T17323] ? loop_set_status_from_info+0x173/0x2a0 [ 1298.935533][T17323] ? __loop_update_dio+0x2d8/0x540 [ 1298.940657][T17323] loop_configure+0xc3b/0x1240 [ 1298.945447][T17323] lo_ioctl+0x21f/0x1a30 [ 1298.949710][T17323] ? __lock_acquire+0x7ea0/0x7ea0 [ 1298.954746][T17323] ? mark_lock+0x94/0x320 [ 1298.959119][T17323] ? lo_release+0x1f0/0x1f0 [ 1298.963630][T17323] ? unwind_next_frame+0x1719/0x1fd0 [ 1298.969019][T17323] ? deref_stack_reg+0x18e/0x220 [ 1298.973974][T17323] ? is_bpf_text_address+0x28b/0x2a0 [ 1298.979328][T17323] ? is_bpf_text_address+0x22/0x2a0 [ 1298.984538][T17323] ? kernel_text_address+0x9c/0xd0 [ 1298.989664][T17323] ? __kernel_text_address+0x9/0x30 [ 1298.994872][T17323] ? unwind_get_return_address+0x49/0x80 [ 1299.000517][T17323] ? stack_trace_save+0xf0/0xf0 [ 1299.005434][T17323] ? arch_stack_walk+0xf2/0x140 [ 1299.010346][T17323] ? stack_trace_save+0xa6/0xf0 [ 1299.015213][T17323] ? __stack_depot_save+0x35/0x480 [ 1299.020347][T17323] ? security_file_ioctl+0x6c/0xa0 [ 1299.025500][T17323] ? __se_sys_ioctl+0x48/0x170 [ 1299.030276][T17323] ? do_syscall_64+0x4c/0xa0 [ 1299.034887][T17323] ? kasan_set_track+0x60/0x70 [ 1299.039667][T17323] ? kasan_set_track+0x4b/0x70 [ 1299.044445][T17323] ? kasan_save_free_info+0x27/0x40 [ 1299.049662][T17323] ? ____kasan_slab_free+0x126/0x1f0 [ 1299.054964][T17323] ? slab_free_freelist_hook+0x133/0x1b0 [ 1299.060608][T17323] ? __kmem_cache_free+0xb6/0x200 [ 1299.065643][T17323] ? tomoyo_path_number_perm+0x4fb/0x650 [ 1299.071290][T17323] ? security_file_ioctl+0x6c/0xa0 [ 1299.076425][T17323] ? __se_sys_ioctl+0x48/0x170 [ 1299.081216][T17323] ? do_syscall_64+0x4c/0xa0 [ 1299.085842][T17323] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1299.091946][T17323] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1299.097974][T17323] ? do_vfs_ioctl+0x1be3/0x1d40 [ 1299.102947][T17323] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 1299.108601][T17323] ? tomoyo_path_number_perm+0x205/0x650 [ 1299.114271][T17323] ? __lock_acquire+0x7ea0/0x7ea0 [ 1299.119329][T17323] ? slab_free_freelist_hook+0x133/0x1b0 [ 1299.124980][T17323] ? tomoyo_path_number_perm+0x4fb/0x650 [ 1299.130646][T17323] ? blkdev_common_ioctl+0x6c1/0x2090 [ 1299.136071][T17323] ? tomoyo_path_number_perm+0x205/0x650 [ 1299.141718][T17323] ? tomoyo_path_number_perm+0x5a4/0x650 [ 1299.147364][T17323] ? blkdev_bszset+0x200/0x200 [ 1299.152145][T17323] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1299.157646][T17323] ? lo_release+0x1f0/0x1f0 [ 1299.162161][T17323] blkdev_ioctl+0x37b/0x740 [ 1299.166678][T17323] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 1299.172155][T17323] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1299.177112][T17323] ? security_file_ioctl+0x7c/0xa0 [ 1299.182240][T17323] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 1299.187710][T17323] __se_sys_ioctl+0xfa/0x170 [ 1299.192340][T17323] do_syscall_64+0x4c/0xa0 [ 1299.196774][T17323] ? clear_bhb_loop+0x60/0xb0 [ 1299.201470][T17323] ? clear_bhb_loop+0x60/0xb0 [ 1299.206173][T17323] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1299.212079][T17323] RIP: 0033:0x7efdfad9f7ab [ 1299.216517][T17323] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 1299.236145][T17323] RSP: 002b:00007efdfbd4cdb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1299.244572][T17323] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 00007efdfad9f7ab [ 1299.252565][T17323] RDX: 000000000000000c RSI: 0000000000004c00 RDI: 000000000000000d [ 1299.260543][T17323] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1299.268528][T17323] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 1299.276516][T17323] R13: 00007efdfbd4cee0 R14: 00007efdfbd4cea0 R15: 00007efdf0bf7000 [ 1299.284518][T17323] [ 1299.348211][T17323] loop7: detected capacity change from 0 to 32768 [ 1299.375987][T17318] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1299.387662][T17323] FAULT_INJECTION: forcing a failure. [ 1299.387662][T17323] name failslab, interval 1, probability 5, space 0, times 93 [ 1299.406812][ C0] net_ratelimit: 40 callbacks suppressed [ 1299.423326][T17323] CPU: 0 PID: 17323 Comm: syz.7.2914 Not tainted syzkaller #0 [ 1299.430848][T17323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1299.440946][T17323] Call Trace: [ 1299.444363][T17323] [ 1299.447338][T17323] dump_stack_lvl+0x188/0x24e [ 1299.452071][T17323] ? show_regs_print_info+0x12/0x12 [ 1299.457324][T17323] ? load_image+0x410/0x410 [ 1299.461909][T17323] ? __might_sleep+0xd0/0xd0 [ 1299.466565][T17323] ? __lock_acquire+0x7ea0/0x7ea0 [ 1299.471646][T17323] should_fail_ex+0x390/0x4c0 [ 1299.476416][T17323] should_failslab+0x5/0x20 [ 1299.480990][T17323] slab_pre_alloc_hook+0x59/0x300 [ 1299.486067][T17323] ? legacy_init_fs_context+0x4d/0xb0 [ 1299.491671][T17323] __kmem_cache_alloc_node+0x4f/0x270 [ 1299.497105][T17323] ? legacy_init_fs_context+0x4d/0xb0 [ 1299.502562][T17323] kmalloc_trace+0x26/0xe0 [ 1299.507035][T17323] legacy_init_fs_context+0x4d/0xb0 [ 1299.512276][T17323] alloc_fs_context+0x628/0x7d0 [ 1299.517176][T17323] do_new_mount+0x10d/0xa50 [ 1299.521737][T17323] __se_sys_mount+0x2e3/0x3d0 [ 1299.526443][T17323] ? __x64_sys_mount+0xc0/0xc0 [ 1299.531280][T17323] ? lockdep_hardirqs_on+0x94/0x140 [ 1299.536517][T17323] ? __x64_sys_mount+0x1c/0xc0 [ 1299.541336][T17323] do_syscall_64+0x4c/0xa0 [ 1299.545803][T17323] ? clear_bhb_loop+0x60/0xb0 [ 1299.550526][T17323] ? clear_bhb_loop+0x60/0xb0 [ 1299.555278][T17323] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1299.561209][T17323] RIP: 0033:0x7efdfada0d8a [ 1299.565664][T17323] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1299.585290][T17323] RSP: 002b:00007efdfbd4ce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1299.585325][T17323] RAX: ffffffffffffffda RBX: 00007efdfbd4cee0 RCX: 00007efdfada0d8a [ 1299.585341][T17323] RDX: 0000200000007440 RSI: 0000200000007480 RDI: 00007efdfbd4cea0 [ 1299.585357][T17323] RBP: 0000200000007440 R08: 00007efdfbd4cee0 R09: 0000000000214001 [ 1299.585373][T17323] R10: 0000000000214001 R11: 0000000000000246 R12: 0000200000007480 [ 1299.601765][T17323] R13: 00007efdfbd4cea0 R14: 0000000000005def R15: 00002000000074c0 [ 1299.601797][T17323] [ 1299.664551][T16202] ocfs2: Unmounting device (7,9) on (node local) [ 1299.884111][T17323] FAULT_INJECTION: forcing a failure. [ 1299.884111][T17323] name failslab, interval 1, probability 5, space 0, times 92 [ 1299.935520][T17323] CPU: 1 PID: 17323 Comm: syz.7.2914 Not tainted syzkaller #0 [ 1299.943059][T17323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1299.953145][T17323] Call Trace: [ 1299.956449][T17323] [ 1299.959401][T17323] dump_stack_lvl+0x188/0x24e [ 1299.964113][T17323] ? show_regs_print_info+0x12/0x12 [ 1299.969381][T17323] ? load_image+0x410/0x410 [ 1299.973901][T17323] ? __might_sleep+0xd0/0xd0 [ 1299.978509][T17323] ? __lock_acquire+0x7ea0/0x7ea0 [ 1299.983552][T17323] should_fail_ex+0x390/0x4c0 [ 1299.988276][T17323] should_failslab+0x5/0x20 [ 1299.992787][T17323] slab_pre_alloc_hook+0x59/0x300 [ 1299.997825][T17323] ? __mmu_notifier_register+0x2df/0x5a0 [ 1300.003481][T17323] __kmem_cache_alloc_node+0x4f/0x270 [ 1300.008892][T17323] ? __mmu_notifier_register+0x2df/0x5a0 [ 1300.014535][T17323] kmalloc_trace+0x26/0xe0 [ 1300.018964][T17323] __mmu_notifier_register+0x2df/0x5a0 [ 1300.024439][T17323] mmu_notifier_register+0x39/0xa0 [ 1300.029573][T17323] kvm_dev_ioctl+0x12d8/0x17f0 [ 1300.034431][T17323] ? hardware_enable_nolock+0x220/0x220 [ 1300.040029][T17323] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1300.044998][T17323] ? security_file_ioctl+0x7c/0xa0 [ 1300.050125][T17323] ? hardware_enable_nolock+0x220/0x220 [ 1300.055681][T17323] __se_sys_ioctl+0xfa/0x170 [ 1300.060316][T17323] do_syscall_64+0x4c/0xa0 [ 1300.064747][T17323] ? clear_bhb_loop+0x60/0xb0 [ 1300.069440][T17323] ? clear_bhb_loop+0x60/0xb0 [ 1300.074138][T17323] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1300.080034][T17323] RIP: 0033:0x7efdfad9fb19 [ 1300.084463][T17323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1300.104199][T17323] RSP: 002b:00007efdfbd4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1300.112629][T17323] RAX: ffffffffffffffda RBX: 00007efdfb025fa0 RCX: 00007efdfad9fb19 [ 1300.120698][T17323] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1300.128679][T17323] RBP: 00007efdfae37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1300.136659][T17323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1300.144637][T17323] R13: 00007efdfb026038 R14: 00007efdfb025fa0 R15: 00007ffebfbb3638 [ 1300.152634][T17323] [ 1300.226217][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.232572][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.828300][T16147] ocfs2: Unmounting device (7,8) on (node local) [ 1301.430513][ T26] audit: type=1800 audit(1794188942.531:2600): pid=17346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2922" name="num" dev="configfs" ino=86235 res=0 errno=0 [ 1301.512656][T17342] loop7: detected capacity change from 0 to 32768 [ 1301.612640][T17342] XFS (loop7): Mounting V5 Filesystem [ 1301.766154][T17342] XFS (loop7): Ending clean mount [ 1301.782138][T17342] XFS (loop7): Quotacheck needed: Please wait. [ 1301.903128][T17342] XFS (loop7): Quotacheck: Done. [ 1302.079502][T15494] XFS (loop7): Unmounting Filesystem [ 1302.864325][T17362] loop7: detected capacity change from 0 to 4096 [ 1302.998710][T17363] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1303.329062][T17364] NILFS (loop7): nilfs_sufile_do_free: segment 9 is already clean [ 1304.472516][T17368] FAULT_INJECTION: forcing a failure. [ 1304.472516][T17368] name failslab, interval 1, probability 5, space 0, times 93 [ 1304.485691][T17368] CPU: 1 PID: 17368 Comm: syz.7.2928 Not tainted syzkaller #0 [ 1304.493254][T17368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1304.503360][T17368] Call Trace: [ 1304.507277][T17368] [ 1304.510295][T17368] dump_stack_lvl+0x188/0x24e [ 1304.514998][T17368] ? show_regs_print_info+0x12/0x12 [ 1304.520229][T17368] ? load_image+0x410/0x410 [ 1304.524768][T17368] ? __might_sleep+0xd0/0xd0 [ 1304.525373][ C0] net_ratelimit: 45 callbacks suppressed [ 1304.529447][T17368] ? __lock_acquire+0x7ea0/0x7ea0 [ 1304.540170][T17368] should_fail_ex+0x390/0x4c0 [ 1304.544910][T17368] should_failslab+0x5/0x20 [ 1304.549433][T17368] slab_pre_alloc_hook+0x59/0x300 [ 1304.554460][T17368] kmem_cache_alloc+0x56/0x2f0 [ 1304.559239][T17368] ? security_file_alloc+0x30/0x110 [ 1304.564479][T17368] security_file_alloc+0x30/0x110 [ 1304.569526][T17368] __alloc_file+0xc2/0x230 [ 1304.573957][T17368] alloc_empty_file+0x90/0x180 [ 1304.578758][T17368] path_openat+0x11c/0x2f10 [ 1304.583297][T17368] ? kasan_set_track+0x60/0x70 [ 1304.588070][T17368] ? verify_lock_unused+0x140/0x140 [ 1304.593265][T17368] ? do_sys_openat2+0xdd/0x4f0 [ 1304.598048][T17368] ? __x64_sys_openat+0x135/0x160 [ 1304.603107][T17368] ? do_syscall_64+0x4c/0xa0 [ 1304.607731][T17368] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1304.613826][T17368] ? do_filp_open+0x420/0x420 [ 1304.618559][T17368] do_filp_open+0x1ee/0x420 [ 1304.623094][T17368] ? vfs_tmpfile+0x490/0x490 [ 1304.627726][T17368] ? _raw_spin_unlock+0x24/0x40 [ 1304.632622][T17368] ? alloc_fd+0x590/0x640 [ 1304.637131][T17368] do_sys_openat2+0x14b/0x4f0 [ 1304.641875][T17368] ? do_sys_open+0xe0/0xe0 [ 1304.646312][T17368] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1304.652593][T17368] ? lock_chain_count+0x20/0x20 [ 1304.657507][T17368] __x64_sys_openat+0x135/0x160 [ 1304.662409][T17368] do_syscall_64+0x4c/0xa0 [ 1304.666887][T17368] ? clear_bhb_loop+0x60/0xb0 [ 1304.671588][T17368] ? clear_bhb_loop+0x60/0xb0 [ 1304.676400][T17368] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1304.682334][T17368] RIP: 0033:0x7efdfad6034e [ 1304.686745][T17368] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1304.706396][T17368] RSP: 002b:00007efdfbd4cd58 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1304.714839][T17368] RAX: ffffffffffffffda RBX: 00007efdfbd4d6c0 RCX: 00007efdfad6034e [ 1304.722812][T17368] RDX: 0000000000000002 RSI: 00007efdfbd4cea0 RDI: ffffffffffffff9c [ 1304.730781][T17368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1304.738769][T17368] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 1304.746760][T17368] R13: 00007efdfbd4cee0 R14: 00007efdfbd4cea0 R15: 00007efdf0bf7000 [ 1304.754737][T17368] [ 1304.890530][T17368] FAULT_INJECTION: forcing a failure. [ 1304.890530][T17368] name failslab, interval 1, probability 5, space 0, times 92 [ 1304.903523][T17368] CPU: 1 PID: 17368 Comm: syz.7.2928 Not tainted syzkaller #0 [ 1304.911044][T17368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1304.921139][T17368] Call Trace: [ 1304.924450][T17368] [ 1304.927399][T17368] dump_stack_lvl+0x188/0x24e [ 1304.932111][T17368] ? show_regs_print_info+0x12/0x12 [ 1304.937333][T17368] ? load_image+0x410/0x410 [ 1304.941875][T17368] ? __might_sleep+0xd0/0xd0 [ 1304.946482][T17368] ? __lock_acquire+0x7ea0/0x7ea0 [ 1304.951530][T17368] should_fail_ex+0x390/0x4c0 [ 1304.956243][T17368] should_failslab+0x5/0x20 [ 1304.960803][T17368] slab_pre_alloc_hook+0x59/0x300 [ 1304.965868][T17368] ? fanotify_alloc_overflow_event+0x4a/0x140 [ 1304.972026][T17368] __kmem_cache_alloc_node+0x4f/0x270 [ 1304.977413][T17368] ? fanotify_alloc_overflow_event+0x4a/0x140 [ 1304.983509][T17368] kmalloc_trace+0x26/0xe0 [ 1304.987947][T17368] fanotify_alloc_overflow_event+0x4a/0x140 [ 1304.993862][T17368] __se_sys_fanotify_init+0x417/0x7b0 [ 1304.999252][T17368] do_syscall_64+0x4c/0xa0 [ 1305.003699][T17368] ? clear_bhb_loop+0x60/0xb0 [ 1305.008391][T17368] ? clear_bhb_loop+0x60/0xb0 [ 1305.013083][T17368] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1305.018987][T17368] RIP: 0033:0x7efdfad9fb19 [ 1305.023411][T17368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1305.043031][T17368] RSP: 002b:00007efdfbd4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 1305.051549][T17368] RAX: ffffffffffffffda RBX: 00007efdfb025fa0 RCX: 00007efdfad9fb19 [ 1305.059529][T17368] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000000000000001 [ 1305.067692][T17368] RBP: 00007efdfae37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1305.075676][T17368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1305.083643][T17368] R13: 00007efdfb026038 R14: 00007efdfb025fa0 R15: 00007ffebfbb3638 [ 1305.083678][T17368] [ 1305.464142][T16918] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.484266][T16918] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.494315][T16918] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.509175][T16918] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.820324][ T26] audit: type=1800 audit(1794188946.921:2601): pid=17378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2932" name="num" dev="configfs" ino=84685 res=0 errno=0 [ 1305.953970][ T4515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1305.993927][ T4515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1306.060262][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1306.119597][ T4577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1306.128939][ T4577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1306.188989][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1306.207720][T17372] loop7: detected capacity change from 0 to 32768 [ 1306.392539][T17372] XFS (loop7): Mounting V5 Filesystem [ 1306.575507][T17372] XFS (loop7): Ending clean mount [ 1306.604354][T17401] loop4: detected capacity change from 0 to 2048 [ 1306.615860][T17372] XFS (loop7): Quotacheck needed: Please wait. [ 1306.728315][T17401] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1306.764759][T17372] XFS (loop7): Quotacheck: Done. [ 1306.794377][T17401] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1306.824066][T17401] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1306.882831][T17372] jffs2: notice: (17372) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1307.225420][T15819] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1307.447439][T15819] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1307.461345][T17382] loop9: detected capacity change from 0 to 32768 [ 1307.475428][T15819] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1307.510927][T15819] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1307.527101][T17380] loop6: detected capacity change from 0 to 40427 [ 1307.545765][T15819] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1307.565451][T15819] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1307.589691][T15819] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1307.590890][T17380] F2FS-fs (loop6): Small segment_count (9 < 1 * 24) [ 1307.598830][T15819] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1307.598855][T15819] usb 9-1: Product: syz [ 1307.598871][T15819] usb 9-1: Manufacturer: syz [ 1307.650149][T15494] XFS (loop7): Unmounting Filesystem [ 1307.671827][T15819] cdc_wdm 9-1:1.0: skipping garbage [ 1307.675533][T17380] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1307.688203][T15819] cdc_wdm 9-1:1.0: skipping garbage [ 1307.708163][T15819] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1307.736306][T15819] cdc_wdm 9-1:1.0: Unknown control protocol [ 1307.771020][T17382] XFS (loop9): Mounting V5 Filesystem [ 1307.780426][T17380] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1307.934641][T17380] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1307.947133][T15819] usb 9-1: USB disconnect, device number 3 [ 1307.966908][T17380] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1308.041801][T17382] XFS (loop9): Ending clean mount [ 1308.066938][T17382] XFS (loop9): Quotacheck needed: Please wait. [ 1308.180463][T17382] XFS (loop9): Quotacheck: Done. [ 1308.464687][T16202] XFS (loop9): Unmounting Filesystem [ 1308.472508][T17438] loop4: detected capacity change from 0 to 256 [ 1308.623241][T17119] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1308.707141][T17440] random: crng reseeded on system resumption [ 1309.186288][T17451] netlink: 'syz.8.2945': attribute type 2 has an invalid length. [ 1309.571492][ C0] net_ratelimit: 103 callbacks suppressed [ 1309.601408][ T26] audit: type=1800 audit(1794188950.701:2602): pid=17458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2943" name="num" dev="configfs" ino=84788 res=0 errno=0 [ 1309.984254][T16089] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.027565][T17464] loop9: detected capacity change from 0 to 2048 [ 1310.057212][T17450] FAULT_INJECTION: forcing a failure. [ 1310.057212][T17450] name failslab, interval 1, probability 5, space 0, times 96 [ 1310.131232][T17464] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1310.143482][T17450] CPU: 1 PID: 17450 Comm: syz.7.2938 Not tainted syzkaller #0 [ 1310.151008][T17450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1310.161113][T17450] Call Trace: [ 1310.164432][T17450] [ 1310.167485][T17450] dump_stack_lvl+0x188/0x24e [ 1310.172225][T17450] ? show_regs_print_info+0x12/0x12 [ 1310.177476][T17450] ? load_image+0x410/0x410 [ 1310.182035][T17450] ? __might_sleep+0xd0/0xd0 [ 1310.186661][T17450] ? __lock_acquire+0x7ea0/0x7ea0 [ 1310.191718][T17450] should_fail_ex+0x390/0x4c0 [ 1310.196425][T17450] should_failslab+0x5/0x20 [ 1310.196511][T17450] slab_pre_alloc_hook+0x59/0x300 [ 1310.196537][T17450] ? __lock_acquire+0x7ea0/0x7ea0 [ 1310.196566][T17450] kmem_cache_alloc_lru+0x49/0x2e0 [ 1310.196589][T17450] ? xas_nomem+0x146/0x1e0 [ 1310.220805][T17450] xas_nomem+0x146/0x1e0 [ 1310.225079][T17450] shmem_add_to_page_cache+0xa4b/0x1c90 [ 1310.230669][T17450] ? __filemap_get_folio+0x10f/0xde0 [ 1310.231862][T17464] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1310.235993][T17450] ? put_page+0x270/0x270 [ 1310.236030][T17450] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1310.236059][T17450] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1310.236083][T17450] ? lockdep_hardirqs_on+0x94/0x140 [ 1310.236111][T17450] shmem_get_folio_gfp+0x1663/0x35e0 [ 1310.236173][T17450] shmem_write_begin+0xee/0x3f0 [ 1310.276348][T17450] generic_perform_write+0x2fa/0x5c0 [ 1310.281682][T17450] ? generic_file_direct_write+0x330/0x330 [ 1310.287592][T17450] ? __file_remove_privs+0x5f0/0x5f0 [ 1310.292891][T17450] ? rwsem_write_trylock+0x135/0x1c0 [ 1310.298213][T17450] ? clear_nonspinnable+0x60/0x60 [ 1310.303251][T17450] ? generic_write_checks_count+0x363/0x440 [ 1310.309185][T17450] __generic_file_write_iter+0x148/0x2a0 [ 1310.315101][T17450] generic_file_write_iter+0xab/0x2e0 [ 1310.320499][T17450] vfs_write+0x482/0x9a0 [ 1310.324766][T17450] ? file_end_write+0x250/0x250 [ 1310.329633][T17450] ? __fget_files+0x3fc/0x460 [ 1310.334334][T17450] ? __fdget_pos+0x1d4/0x360 [ 1310.338957][T17450] ? ksys_write+0x70/0x260 [ 1310.343473][T17450] ksys_write+0x14d/0x260 [ 1310.347842][T17450] ? __ia32_sys_read+0x80/0x80 [ 1310.352615][T17450] ? lockdep_hardirqs_on+0x94/0x140 [ 1310.357845][T17450] do_syscall_64+0x4c/0xa0 [ 1310.362276][T17450] ? clear_bhb_loop+0x60/0xb0 [ 1310.366968][T17450] ? clear_bhb_loop+0x60/0xb0 [ 1310.371665][T17450] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1310.377571][T17450] RIP: 0033:0x7efdfad6034e [ 1310.381997][T17450] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1310.401612][T17450] RSP: 002b:00007efdfbd2bda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1310.410057][T17450] RAX: ffffffffffffffda RBX: 00007efdfbd2c6c0 RCX: 00007efdfad6034e [ 1310.418038][T17450] RDX: 00000000013bd7ef RSI: 00007efdf0bf7000 RDI: 000000000000000a [ 1310.426019][T17450] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1310.433997][T17450] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 1310.441975][T17450] R13: 00007efdfbd2bee0 R14: 00007efdfbd2bea0 R15: 00007efdf0bf7000 [ 1310.449971][T17450] [ 1310.466922][T16588] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1310.493830][T16089] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.515179][T17464] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1310.634453][T16089] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.683369][T16588] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1310.705310][T16588] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1310.735367][T16588] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1310.755483][T16588] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1310.775513][T16588] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.961887][T16089] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.628641][T16588] cxacru 7-1:1.0: send of cm 0x91 failed (-71) [ 1311.645993][T16588] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 1311.668258][T16588] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 1311.714768][T16588] cxacru: probe of 7-1:1.0 failed with error -71 [ 1311.724743][T11211] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1311.742596][T16588] usb 7-1: USB disconnect, device number 4 [ 1311.748743][T11211] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1311.765477][T16587] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1311.773739][T11211] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1311.786793][T11211] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1311.795417][T11211] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1311.803251][T11211] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1311.969784][T16587] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1311.985541][T16587] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1312.005322][T16587] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1312.026896][T16587] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1312.055373][T16587] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1312.080498][T16587] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1312.117937][T16587] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1312.136430][T16587] usb 9-1: Product: syz [ 1312.158725][T16587] usb 9-1: Manufacturer: syz [ 1312.216372][T16587] cdc_wdm 9-1:1.0: skipping garbage [ 1312.216387][T16587] cdc_wdm 9-1:1.0: skipping garbage [ 1312.295620][T16587] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1312.335208][T16587] cdc_wdm 9-1:1.0: Unknown control protocol [ 1312.407471][T17483] rxe_eth0 speed is unknown, defaulting to 1000 [ 1312.446672][T16587] usb 9-1: USB disconnect, device number 4 [ 1312.624167][T17478] loop9: detected capacity change from 0 to 32768 [ 1312.743284][T17478] XFS (loop9): Mounting V5 Filesystem [ 1312.969626][T17478] XFS (loop9): Ending clean mount [ 1313.009943][T17478] XFS (loop9): Quotacheck needed: Please wait. [ 1313.055062][T17496] loop6: detected capacity change from 0 to 4096 [ 1313.085917][T17486] loop7: detected capacity change from 0 to 32768 [ 1313.139300][T17478] XFS (loop9): Quotacheck: Done. [ 1313.182155][T17486] jffs2: notice: (17486) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1313.292710][T17508] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1313.419571][T16202] XFS (loop9): Unmounting Filesystem [ 1313.667743][T17513] NILFS (loop6): nilfs_sufile_do_free: segment 9 is already clean [ 1313.885934][ T4279] Bluetooth: hci1: command 0x0409 tx timeout [ 1314.144750][T17519] loop8: detected capacity change from 0 to 4096 [ 1314.326181][T17519] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1314.617357][ C1] net_ratelimit: 48 callbacks suppressed [ 1314.807908][T17535] CIFS: Attempting to mount \\127.0.0.1\share [ 1314.975017][T16147] EXT4-fs (loop8): unmounting filesystem. [ 1315.316522][T17543] Bluetooth: MGMT ver 1.22 [ 1315.613627][T17535] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1315.754065][T17530] loop7: detected capacity change from 0 to 32768 [ 1315.951365][T17483] chnl_net:caif_netlink_parms(): no params data found [ 1315.965670][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 1316.054094][T17530] XFS (loop7): Mounting V5 Filesystem [ 1316.224251][T17530] XFS (loop7): Ending clean mount [ 1316.244051][T17530] XFS (loop7): Quotacheck needed: Please wait. [ 1316.262861][T16089] device hsr_slave_0 left promiscuous mode [ 1316.353535][T16089] device hsr_slave_1 left promiscuous mode [ 1316.355453][T16587] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1316.396011][T17530] XFS (loop7): Quotacheck: Done. [ 1316.482424][T16089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1316.501392][T17541] FAULT_INJECTION: forcing a failure. [ 1316.501392][T17541] name failslab, interval 1, probability 5, space 0, times 96 [ 1316.514585][T16089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1316.554115][T16089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1316.564624][T17541] CPU: 0 PID: 17541 Comm: syz.6.2964 Not tainted syzkaller #0 [ 1316.572138][T17541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1316.582241][T17541] Call Trace: [ 1316.585558][T17541] [ 1316.588524][T17541] dump_stack_lvl+0x188/0x24e [ 1316.593251][T17541] ? show_regs_print_info+0x12/0x12 [ 1316.598506][T17541] ? load_image+0x410/0x410 [ 1316.603056][T17541] ? __might_sleep+0xd0/0xd0 [ 1316.607688][T17541] ? __lock_acquire+0x7ea0/0x7ea0 [ 1316.612737][T17541] should_fail_ex+0x390/0x4c0 [ 1316.617440][T17541] should_failslab+0x5/0x20 [ 1316.617463][T17541] slab_pre_alloc_hook+0x59/0x300 [ 1316.617488][T17541] ? __lock_acquire+0x7ea0/0x7ea0 [ 1316.617517][T17541] kmem_cache_alloc_lru+0x49/0x2e0 [ 1316.617538][T17541] ? xas_nomem+0x146/0x1e0 [ 1316.617570][T17541] xas_nomem+0x146/0x1e0 [ 1316.617596][T17541] shmem_add_to_page_cache+0xa4b/0x1c90 [ 1316.617624][T17541] ? __filemap_get_folio+0x10f/0xde0 [ 1316.617661][T17541] ? put_page+0x270/0x270 [ 1316.617691][T17541] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1316.617720][T17541] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1316.617744][T17541] ? lockdep_hardirqs_on+0x94/0x140 [ 1316.617770][T17541] shmem_get_folio_gfp+0x1663/0x35e0 [ 1316.617831][T17541] shmem_write_begin+0xee/0x3f0 [ 1316.617865][T17541] generic_perform_write+0x2fa/0x5c0 [ 1316.617912][T17541] ? generic_file_direct_write+0x330/0x330 [ 1316.617941][T17541] ? __file_remove_privs+0x5f0/0x5f0 [ 1316.617965][T17541] ? rwsem_write_trylock+0x135/0x1c0 [ 1316.617991][T17541] ? clear_nonspinnable+0x60/0x60 [ 1316.618015][T17541] ? generic_write_checks_count+0x363/0x440 [ 1316.618046][T17541] __generic_file_write_iter+0x148/0x2a0 [ 1316.618072][T17541] generic_file_write_iter+0xab/0x2e0 [ 1316.628581][T17541] vfs_write+0x482/0x9a0 [ 1316.628616][T17541] ? file_end_write+0x250/0x250 [ 1316.638749][T17541] ? __fget_files+0x3fc/0x460 [ 1316.638788][T17541] ? __fdget_pos+0x1d4/0x360 [ 1316.647447][T17541] ? ksys_write+0x70/0x260 [ 1316.658712][T17541] ksys_write+0x14d/0x260 [ 1316.668073][T17541] ? __ia32_sys_read+0x80/0x80 [ 1316.668101][T17541] ? lockdep_hardirqs_on+0x94/0x140 [ 1316.668127][T17541] do_syscall_64+0x4c/0xa0 [ 1316.684418][T16089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1316.689013][T17541] ? clear_bhb_loop+0x60/0xb0 [ 1316.689047][T17541] ? clear_bhb_loop+0x60/0xb0 [ 1316.705447][T17541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1316.705482][T17541] RIP: 0033:0x7fb4a416034e [ 1316.727639][T17541] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1316.727661][T17541] RSP: 002b:00007fb4a513fda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1316.727689][T17541] RAX: ffffffffffffffda RBX: 00007fb4a51406c0 RCX: 00007fb4a416034e [ 1316.737577][T17541] RDX: 00000000013bd7ef RSI: 00007fb499ff7000 RDI: 000000000000000a [ 1316.737595][T17541] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1316.737607][T17541] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 1316.737620][T17541] R13: 00007fb4a513fee0 R14: 00007fb4a513fea0 R15: 00007fb499ff7000 [ 1316.747347][T17541] [ 1316.934734][T16587] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1316.954752][T16587] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1316.987748][T16587] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1317.002909][T16089] device bridge_slave_1 left promiscuous mode [ 1317.034334][T16089] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.051331][T16587] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1317.108385][T16587] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1317.161102][T16587] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1317.185165][T16089] device bridge_slave_0 left promiscuous mode [ 1317.190316][T16587] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1317.191390][T15494] XFS (loop7): Unmounting Filesystem [ 1317.206333][T16587] usb 10-1: Product: syz [ 1317.210625][T16587] usb 10-1: Manufacturer: syz [ 1317.235515][T16089] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.283540][T16587] cdc_wdm 10-1:1.0: skipping garbage [ 1317.289033][T16587] cdc_wdm 10-1:1.0: skipping garbage [ 1317.327783][T16587] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1317.333802][T16587] cdc_wdm 10-1:1.0: Unknown control protocol [ 1317.471252][T15819] usb 10-1: USB disconnect, device number 2 [ 1317.562456][T16089] device veth1_macvtap left promiscuous mode [ 1317.573056][T16089] device veth0_macvtap left promiscuous mode [ 1317.593793][T16089] device veth1_vlan left promiscuous mode [ 1317.618546][T16089] device veth0_vlan left promiscuous mode [ 1317.803702][T17561] loop8: detected capacity change from 0 to 32768 [ 1317.829808][T17575] loop6: detected capacity change from 0 to 4096 [ 1317.904550][T17561] XFS (loop8): Mounting V5 Filesystem [ 1317.944059][T17584] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1318.045646][ T4279] Bluetooth: hci1: command 0x040f tx timeout [ 1318.196507][T17561] XFS (loop8): Ending clean mount [ 1318.205768][T17561] XFS (loop8): Quotacheck needed: Please wait. [ 1318.335597][T17561] XFS (loop8): Quotacheck: Done. [ 1318.396048][T17561] XFS (loop8): Unmounting Filesystem [ 1318.412312][T17589] NILFS (loop6): nilfs_sufile_do_free: segment 9 is already clean [ 1319.290709][T17595] loop9: detected capacity change from 0 to 32768 [ 1319.430444][T17595] XFS (loop9): Mounting V5 Filesystem [ 1319.517066][T17595] XFS (loop9): Ending clean mount [ 1319.577047][T17595] XFS (loop9): Quotacheck needed: Please wait. [ 1319.747650][T17595] XFS (loop9): Quotacheck: Done. [ 1319.845661][T17595] jffs2: notice: (17595) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1319.885369][ C0] net_ratelimit: 45 callbacks suppressed [ 1319.999058][T17597] loop6: detected capacity change from 0 to 32768 [ 1320.129040][T17612] jffs2: warning: (17612) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=528 [ 1320.146502][T17119] I/O error, dev loop6, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1320.156507][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 1320.606479][T17606] loop7: detected capacity change from 0 to 32768 [ 1320.714493][T16202] XFS (loop9): Unmounting Filesystem [ 1320.723904][T17597] jffs2: notice: (17597) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1320.783222][T17606] XFS (loop7): Mounting V5 Filesystem [ 1320.896669][T17606] XFS (loop7): Ending clean mount [ 1321.097520][T17620] loop6: detected capacity change from 0 to 8192 [ 1321.403315][T16089] team0 (unregistering): Port device team_slave_1 removed [ 1321.414379][T17620] loop6: detected capacity change from 8192 to 0 [ 1321.416213][T17631] syz.6.2974: attempt to access beyond end of device [ 1321.416213][T17631] loop6: rw=0, sector=65, nr_sectors = 1 limit=0 [ 1321.434861][T17631] FAT-fs (loop6): Directory bread(block 65) failed [ 1321.441575][T17631] syz.6.2974: attempt to access beyond end of device [ 1321.441575][T17631] loop6: rw=0, sector=66, nr_sectors = 1 limit=0 [ 1321.454496][T17631] FAT-fs (loop6): Directory bread(block 66) failed [ 1321.454547][T17631] syz.6.2974: attempt to access beyond end of device [ 1321.454547][T17631] loop6: rw=0, sector=67, nr_sectors = 1 limit=0 [ 1321.454574][T17631] FAT-fs (loop6): Directory bread(block 67) failed [ 1321.454610][T17631] syz.6.2974: attempt to access beyond end of device [ 1321.454610][T17631] loop6: rw=0, sector=68, nr_sectors = 1 limit=0 [ 1321.454636][T17631] FAT-fs (loop6): Directory bread(block 68) failed [ 1321.454672][T17631] syz.6.2974: attempt to access beyond end of device [ 1321.454672][T17631] loop6: rw=0, sector=69, nr_sectors = 1 limit=0 [ 1321.454698][T17631] FAT-fs (loop6): Directory bread(block 69) failed [ 1321.454733][T17631] syz.6.2974: attempt to access beyond end of device [ 1321.454733][T17631] loop6: rw=0, sector=70, nr_sectors = 1 limit=0 [ 1321.454766][T17631] FAT-fs (loop6): Directory bread(block 70) failed [ 1321.454802][T17631] syz.6.2974: attempt to access beyond end of device [ 1321.454802][T17631] loop6: rw=0, sector=71, nr_sectors = 1 limit=0 [ 1321.454828][T17631] FAT-fs (loop6): Directory bread(block 71) failed [ 1321.454903][T17631] syz.6.2974: attempt to access beyond end of device [ 1321.454903][T17631] loop6: rw=0, sector=65, nr_sectors = 1 limit=0 [ 1321.493959][T17631] FAT-fs (loop6): Directory bread(block 65) failed [ 1321.494177][T17631] syz.6.2974: attempt to access beyond end of device [ 1321.494177][T17631] loop6: rw=0, sector=66, nr_sectors = 1 limit=0 [ 1321.539767][T17631] FAT-fs (loop6): Directory bread(block 66) failed [ 1321.559160][T17631] syz.6.2974: attempt to access beyond end of device [ 1321.559160][T17631] loop6: rw=0, sector=67, nr_sectors = 1 limit=0 [ 1321.612810][T17631] FAT-fs (loop6): Directory bread(block 67) failed [ 1321.685320][T17597] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 1321.694651][T17597] ------------[ cut here ]------------ [ 1321.700235][T17597] WARNING: CPU: 0 PID: 17597 at fs/buffer.c:1081 mark_buffer_dirty+0x383/0x7a0 [ 1321.709370][T17597] Modules linked in: [ 1321.713319][T17597] CPU: 0 PID: 17597 Comm: syz.6.2974 Not tainted syzkaller #0 [ 1321.720882][T17597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1321.731159][T17597] RIP: 0010:mark_buffer_dirty+0x383/0x7a0 [ 1321.736977][T17597] Code: 13 45 e2 ff 49 8b 3f be 04 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 ec a5 fc ff e8 27 e1 90 ff e9 43 ff ff ff e8 1d e1 90 ff <0f> 0b e9 ba fc ff ff e8 11 e1 90 ff 0f 0b e9 00 fd ff ff e8 05 e1 [ 1321.756919][T17597] RSP: 0018:ffffc900037f72f0 EFLAGS: 00010283 [ 1321.763082][T17597] RAX: ffffffff81f18783 RBX: ffff88808174ed98 RCX: 0000000000080000 [ 1321.771219][T17597] RDX: ffffc90005429000 RSI: 0000000000025b0c RDI: 0000000000025b0d [ 1321.779290][T17597] RBP: ffff888018868801 R08: ffff88808174ed9f R09: 1ffff110102e9db3 [ 1321.787366][T17597] R10: dffffc0000000000 R11: ffffed10102e9db4 R12: dffffc0000000000 [ 1321.795425][T17597] R13: ffff8880816d0368 R14: ffffea000112de18 R15: 000000000fffffff [ 1321.795449][T17597] FS: 00007fb4a51406c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 1321.795469][T17597] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1321.795486][T17597] CR2: 00007f918bb5da08 CR3: 00000000713bb000 CR4: 00000000003506f0 [ 1321.795507][T17597] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1321.795522][T17597] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1321.795537][T17597] Call Trace: [ 1321.795547][T17597] [ 1321.795561][T17597] mark_buffer_dirty_inode+0x82/0x2c0 [ 1321.795597][T17597] ? fat_sync_bhs+0x1a2/0x1c0 [ 1321.795718][T17597] fat_ent_write+0xae/0x180 [ 1321.795744][T17597] fat_chain_add+0x3e5/0x880 [ 1321.843886][T17597] ? fat_clusters_flush+0x410/0x410 [ 1321.855796][T17597] ? fat_bmap+0x483/0x590 [ 1321.864939][T17597] fat_get_block+0x761/0xae0 [ 1321.864984][T17597] ? fat_block_truncate_page+0x50/0x50 [ 1321.865020][T17597] ? create_page_buffers+0x24f/0x4a0 [ 1321.865056][T17597] __block_write_begin_int+0x577/0x1ab0 [ 1321.865112][T17597] ? fat_block_truncate_page+0x50/0x50 [ 1321.865137][T17597] ? page_zero_new_buffers+0x650/0x650 [ 1321.865179][T17597] ? fat_block_truncate_page+0x50/0x50 [ 1321.875102][T17597] block_write_begin+0x96/0x1e0 [ 1321.895016][T17597] ? fat_block_truncate_page+0x50/0x50 [ 1321.921971][T17597] cont_write_begin+0x5f9/0x800 [ 1321.922017][T17597] ? generic_cont_expand_simple+0x200/0x200 [ 1321.922046][T17597] ? fault_in_readable+0x139/0x1f0 [ 1321.922078][T17597] ? fault_in_readable+0x13e/0x1f0 [ 1321.949138][T17597] fat_write_begin+0x93/0x160 [ 1321.949171][T17597] ? fat_block_truncate_page+0x50/0x50 [ 1321.949201][T17597] generic_perform_write+0x2fa/0x5c0 [ 1321.949257][T17597] ? generic_file_direct_write+0x330/0x330 [ 1321.949287][T17597] ? __file_remove_privs+0x5f0/0x5f0 [ 1321.949314][T17597] ? rwsem_write_trylock+0x135/0x1c0 [ 1321.949342][T17597] ? clear_nonspinnable+0x60/0x60 [ 1321.949368][T17597] ? generic_write_checks_count+0x363/0x440 [ 1321.973171][T17597] __generic_file_write_iter+0x148/0x2a0 [ 1321.973217][T17597] generic_file_write_iter+0xab/0x2e0 [ 1321.984325][T17597] do_iter_write+0x638/0xb10 [ 1321.984378][T17597] ? vfs_iter_write+0xa0/0xa0 [ 1321.984395][T17597] ? rcu_read_lock_any_held+0xb0/0x130 [ 1321.995866][T17597] do_pwritev+0x23e/0x3a0 [ 1321.995899][T17597] ? do_preadv+0x390/0x390 [ 1322.001813][T17597] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1322.012087][T17597] ? lock_chain_count+0x20/0x20 [ 1322.031089][T17597] ? lockdep_hardirqs_on+0x94/0x140 [ 1322.042320][T17597] ? __x64_sys_pwritev2+0xba/0x100 [ 1322.047611][T17597] do_syscall_64+0x4c/0xa0 [ 1322.047644][T17597] ? clear_bhb_loop+0x60/0xb0 [ 1322.053226][T17597] ? clear_bhb_loop+0x60/0xb0 [ 1322.053266][T17597] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1322.067128][T17597] RIP: 0033:0x7fb4a419fb19 [ 1322.067155][T17597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1322.067175][T17597] RSP: 002b:00007fb4a5140028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1322.067201][T17597] RAX: ffffffffffffffda RBX: 00007fb4a4425fa0 RCX: 00007fb4a419fb19 [ 1322.067218][T17597] RDX: 0000000000000001 RSI: 00002000000019c0 RDI: 0000000000000007 [ 1322.067234][T17597] RBP: 00007fb4a4237b70 R08: 0000000000000000 R09: 0000000000000000 [ 1322.067250][T17597] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000000 [ 1322.067264][T17597] R13: 00007fb4a4426038 R14: 00007fb4a4425fa0 R15: 00007ffe8e882288 [ 1322.067296][T17597] [ 1322.076900][T16202] kernfs log: removing [ 1322.077591][ C1] virtqueue callback for ffff888026185600 (ffffffff853ec550) [ 1322.077618][ C1] sd 0:0:1:0: cmd ffff888027df6660 response 0 status 0x0 sense_len 0 [ 1322.077643][ C1] No more buffers in queue [ 1322.077670][ C0] virtqueue callback for ffff88801ba87200 (ffffffff84709a30) [ 1322.077723][ C0] virtqueue interrupt with no work for ffff88801ba87000 [ 1322.077736][ C0] virtqueue interrupt with no work for ffff88801ba86e00 [ 1322.077768][T17597] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1322.077779][T17597] CPU: 0 PID: 17597 Comm: syz.6.2974 Not tainted syzkaller #0 [ 1322.077798][T17597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1322.077809][T17597] Call Trace: [ 1322.077815][T17597] [ 1322.077823][T17597] dump_stack_lvl+0x188/0x24e [ 1322.077853][T17597] ? memcpy+0x3c/0x60 [ 1322.077873][T17597] ? show_regs_print_info+0x12/0x12 [ 1322.077898][T17597] ? load_image+0x410/0x410 [ 1322.077931][T17597] panic+0x2d3/0x710 [ 1322.077955][T17597] ? bpf_jit_dump+0xd0/0xd0 [ 1322.077991][T17597] __warn+0x2f8/0x4f0 [ 1322.078007][T17597] ? mark_buffer_dirty+0x383/0x7a0 [ 1322.078034][T17597] ? mark_buffer_dirty+0x383/0x7a0 [ 1322.078057][T17597] report_bug+0x2ba/0x4f0 [ 1322.078082][T17597] ? mark_buffer_dirty+0x383/0x7a0 [ 1322.078111][T17597] handle_bug+0x3a/0x70 [ 1322.078127][T17597] exc_invalid_op+0x16/0x40 [ 1322.078143][T17597] asm_exc_invalid_op+0x16/0x20 [ 1322.078164][T17597] RIP: 0010:mark_buffer_dirty+0x383/0x7a0 [ 1322.078190][T17597] Code: 13 45 e2 ff 49 8b 3f be 04 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 ec a5 fc ff e8 27 e1 90 ff e9 43 ff ff ff e8 1d e1 90 ff <0f> 0b e9 ba fc ff ff e8 11 e1 90 ff 0f 0b e9 00 fd ff ff e8 05 e1 [ 1322.078205][T17597] RSP: 0018:ffffc900037f72f0 EFLAGS: 00010283 [ 1322.078223][T17597] RAX: ffffffff81f18783 RBX: ffff88808174ed98 RCX: 0000000000080000 [ 1322.078237][T17597] RDX: ffffc90005429000 RSI: 0000000000025b0c RDI: 0000000000025b0d [ 1322.078249][T17597] RBP: ffff888018868801 R08: ffff88808174ed9f R09: 1ffff110102e9db3 [ 1322.078263][T17597] R10: dffffc0000000000 R11: ffffed10102e9db4 R12: dffffc0000000000 [ 1322.078276][T17597] R13: ffff8880816d0368 R14: ffffea000112de18 R15: 000000000fffffff [ 1322.078296][T17597] ? mark_buffer_dirty+0x383/0x7a0 [ 1322.078330][T17597] mark_buffer_dirty_inode+0x82/0x2c0 [ 1322.078353][T17597] ? fat_sync_bhs+0x1a2/0x1c0 [ 1322.078385][T17597] fat_ent_write+0xae/0x180 [ 1322.078406][T17597] fat_chain_add+0x3e5/0x880 [ 1322.078431][T17597] ? fat_clusters_flush+0x410/0x410 [ 1322.078460][T17597] ? fat_bmap+0x483/0x590 [ 1322.078491][T17597] fat_get_block+0x761/0xae0 [ 1322.078523][T17597] ? fat_block_truncate_page+0x50/0x50 [ 1322.078551][T17597] ? create_page_buffers+0x24f/0x4a0 [ 1322.078580][T17597] __block_write_begin_int+0x577/0x1ab0 [ 1322.078626][T17597] ? fat_block_truncate_page+0x50/0x50 [ 1322.078644][T17597] ? page_zero_new_buffers+0x650/0x650 [ 1322.078678][T17597] ? fat_block_truncate_page+0x50/0x50 [ 1322.078696][T17597] block_write_begin+0x96/0x1e0 [ 1322.078719][T17597] ? fat_block_truncate_page+0x50/0x50 [ 1322.078740][T17597] cont_write_begin+0x5f9/0x800 [ 1322.078768][T17597] ? generic_cont_expand_simple+0x200/0x200 [ 1322.078790][T17597] ? fault_in_readable+0x139/0x1f0 [ 1322.078815][T17597] ? fault_in_readable+0x13e/0x1f0 [ 1322.078842][T17597] fat_write_begin+0x93/0x160 [ 1322.078859][T17597] ? fat_block_truncate_page+0x50/0x50 [ 1322.078881][T17597] generic_perform_write+0x2fa/0x5c0 [ 1322.078921][T17597] ? generic_file_direct_write+0x330/0x330 [ 1322.078946][T17597] ? __file_remove_privs+0x5f0/0x5f0 [ 1322.078968][T17597] ? rwsem_write_trylock+0x135/0x1c0 [ 1322.078990][T17597] ? clear_nonspinnable+0x60/0x60 [ 1322.079010][T17597] ? generic_write_checks_count+0x363/0x440 [ 1322.079035][T17597] __generic_file_write_iter+0x148/0x2a0 [ 1322.079063][T17597] generic_file_write_iter+0xab/0x2e0 [ 1322.079091][T17597] do_iter_write+0x638/0xb10 [ 1322.079120][T17597] ? vfs_iter_write+0xa0/0xa0 [ 1322.079135][T17597] ? rcu_read_lock_any_held+0xb0/0x130 [ 1322.079171][T17597] do_pwritev+0x23e/0x3a0 [ 1322.079192][T17597] ? do_preadv+0x390/0x390 [ 1322.079225][T17597] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1322.079251][T17597] ? lock_chain_count+0x20/0x20 [ 1322.079280][T17597] ? lockdep_hardirqs_on+0x94/0x140 [ 1322.079297][T17597] ? __x64_sys_pwritev2+0xba/0x100 [ 1322.079317][T17597] do_syscall_64+0x4c/0xa0 [ 1322.079339][T17597] ? clear_bhb_loop+0x60/0xb0 [ 1322.079361][T17597] ? clear_bhb_loop+0x60/0xb0 [ 1322.079392][T17597] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1322.079414][T17597] RIP: 0033:0x7fb4a419fb19 [ 1322.079430][T17597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1322.079444][T17597] RSP: 002b:00007fb4a5140028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1322.079462][T17597] RAX: ffffffffffffffda RBX: 00007fb4a4425fa0 RCX: 00007fb4a419fb19 [ 1322.079475][T17597] RDX: 0000000000000001 RSI: 00002000000019c0 RDI: 0000000000000007 [ 1322.079487][T17597] RBP: 00007fb4a4237b70 R08: 0000000000000000 R09: 0000000000000000 [ 1322.079499][T17597] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000000 [ 1322.079510][T17597] R13: 00007fb4a4426038 R14: 00007fb4a4425fa0 R15: 00007ffe8e882288 [ 1322.079538][T17597] [ 1322.097477][T17597] Kernel Offset: disabled [ 1322.660195][T17597] Rebooting in 86400 seconds..